• Lakshmi Ramasubramanian's avatar
    IMA: Define an IMA hook to measure keys · 88e70da1
    Lakshmi Ramasubramanian authored
    Measure asymmetric keys used for verifying file signatures,
    certificates, etc.
    
    This patch defines a new IMA hook namely ima_post_key_create_or_update()
    to measure the payload used to create a new asymmetric key or
    update an existing asymmetric key.
    
    Asymmetric key structure is defined only when
    CONFIG_ASYMMETRIC_PUBLIC_KEY_SUBTYPE is defined. Since the IMA hook
    measures asymmetric keys, the IMA hook is defined in a new file namely
    ima_asymmetric_keys.c which is built only if
    CONFIG_ASYMMETRIC_PUBLIC_KEY_SUBTYPE is defined.
    Signed-off-by: default avatarLakshmi Ramasubramanian <nramas@linux.microsoft.com>
    Signed-off-by: default avatarMimi Zohar <zohar@linux.ibm.com>
    88e70da1
ima_asymmetric_keys.c 1.58 KB