On 5/3/2019 2:47 PM, Mimi Zohar wrote:
On Fri, 2019-05-03 at 10:17 +0200, Roberto Sassu wrote:
On 5/3/2019 8:51 AM, Roberto Sassu wrote:
On 5/3/2019 1:02 AM, Mimi Zohar wrote:
Perhaps instead of making the template format dynamic based on fields,
as I suggested above, define a per policy rule template format option.
This should not be too complicated. The template to use will be returned
by ima_get_action() to process_measurement().
Some time ago I made some patches:
https://sourceforge.net/p/linux-ima/mailman/message/31655784/
Thank you for the reference! In addition to Matthew's VFS hash use
case, Thiago's appended signature support would benefit from a per
policy rule template. Do you want, and have time, to add this
support?
No problem. At the moment I'm busy with the digest lists patch set. I
will see if I have time later.
Roberto
--
HUAWEI TECHNOLOGIES Duesseldorf GmbH, HRB 56063
Managing Director: Bo PENG, Jian LI, Yanli SHI
