Mimi Zohar 5a73fcfa88 ima: differentiate appraise status only for hook specific rules ...

Different hooks can require different methods for appraising a
file's integrity.  As a result, an integrity appraisal status is
cached on a per hook basis.

Only a hook specific rule, requires the inode to be re-appraised.
This patch eliminates unnecessary appraisals.

Signed-off-by: Mimi Zohar <[email protected]>
Signed-off-by: Dmitry Kasatkin <[email protected]>

2013-01-22 16:10:39 -05:00

..

apparmor

apparmor: fix IRQ stack overflow during free_profile

2012-10-25 02:12:50 +11:00

integrity

ima: differentiate appraise status only for hook specific rules

2013-01-22 16:10:39 -05:00

keys

keys: fix unreachable code

2012-12-20 17:40:21 -08:00

selinux

bridge: update selinux perm table for RTM_NEWMDB and RTM_DELMDB

2012-12-15 17:14:38 -08:00

smack

Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security

2012-12-16 15:40:50 -08:00

tomoyo

consitify do_mount() arguments

2012-10-11 20:02:04 -04:00

yama

Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/ebiederm/user-namespace

2012-12-17 15:44:47 -08:00

capability.c

security: introduce kernel_module_from_file hook

2012-12-14 13:05:24 +10:30

commoncap.c

Fix cap_capable to only allow owners in the parent user namespace to have caps.

2012-12-14 13:50:32 -08:00

device_cgroup.c

cgroup: rename ->create/post_create/pre_destroy/destroy() to ->css_alloc/online/offline/free()

2012-11-19 08:13:38 -08:00

inode.c

…

Kconfig

…

lsm_audit.c

…

Makefile

…

min_addr.c

…

security.c

ima: support new kernel module syscall

2012-12-14 13:05:26 +10:30