diff options
| author | Mimi Zohar <zohar@linux.vnet.ibm.com> | 2013-11-17 00:31:47 -0500 |
|---|---|---|
| committer | Mimi Zohar <zohar@linux.vnet.ibm.com> | 2014-01-03 07:42:59 -0500 |
| commit | ef8894b0ca3f123bd68dd748b162369ccbeca4a7 (patch) | |
| tree | f531c98459182b883edf0228a585818f0b91328c /Documentation/security | |
| parent | 712a49bd7d00d567edd5235e6e9034c55052446b (diff) | |
| download | linux-ef8894b0ca3f123bd68dd748b162369ccbeca4a7.tar.gz linux-ef8894b0ca3f123bd68dd748b162369ccbeca4a7.tar.bz2 linux-ef8894b0ca3f123bd68dd748b162369ccbeca4a7.zip | |
ima: update IMA-templates.txt documentation
Patch "ima: extend the measurement list to include the file signature"
defined a new field called 'sig' and a new template called 'ima-sig'.
This patch updates the Documentation/security/IMA-templates.txt.
Changelog:
- fixed formatting issues (Roberto Sassu)
Reported-by: Roberto Sassu <roberto.sassu@polito.it>
Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>
Signed-off-by: Roberto Sassu <roberto.sassu@polito.it>
Diffstat (limited to 'Documentation/security')
| -rw-r--r-- | Documentation/security/IMA-templates.txt | 6 |
1 files changed, 4 insertions, 2 deletions
diff --git a/Documentation/security/IMA-templates.txt b/Documentation/security/IMA-templates.txt index a777e5f1df5b..a4e102dddfea 100644 --- a/Documentation/security/IMA-templates.txt +++ b/Documentation/security/IMA-templates.txt @@ -67,12 +67,14 @@ descriptors by adding their identifier to the format string - 'd-ng': the digest of the event, calculated with an arbitrary hash algorithm (field format: [<hash algo>:]digest, where the digest prefix is shown only if the hash algorithm is not SHA1 or MD5); - - 'n-ng': the name of the event, without size limitations. + - 'n-ng': the name of the event, without size limitations; + - 'sig': the file signature. Below, there is the list of defined template descriptors: - "ima": its format is 'd|n'; - - "ima-ng" (default): its format is 'd-ng|n-ng'. + - "ima-ng" (default): its format is 'd-ng|n-ng'; + - "ima-sig": its format is 'd-ng|n-ng|sig'. |