On 4/29/20 6:38 AM, Mimi Zohar wrote:
Extend the IMA policy language with "mode=IXUGO" to identify files with the execute mode bit enabled. Examples: measure func=FILE_CHECK mode=IXUGO appraise func=FILE_CHECK appraise_type=imasig mode=IXUGO Suggested-by: Steve Grubb <sgrubb@xxxxxxxxxx> (based on execute mode bit) Signed-off-by: Mimi Zohar <zohar@xxxxxxxxxxxxx>
Reviewed.
