|
@@ -49,14 +49,12 @@ struct ima_measure_rule_entry {
|
|
* written in terms of .action, .func, .mask, .fsmagic, and .uid
|
|
* written in terms of .action, .func, .mask, .fsmagic, and .uid
|
|
*/
|
|
*/
|
|
static struct ima_measure_rule_entry default_rules[] = {
|
|
static struct ima_measure_rule_entry default_rules[] = {
|
|
- {.action = DONT_MEASURE,.fsmagic = PROC_SUPER_MAGIC,
|
|
|
|
- .flags = IMA_FSMAGIC},
|
|
|
|
|
|
+ {.action = DONT_MEASURE,.fsmagic = PROC_SUPER_MAGIC,.flags = IMA_FSMAGIC},
|
|
{.action = DONT_MEASURE,.fsmagic = SYSFS_MAGIC,.flags = IMA_FSMAGIC},
|
|
{.action = DONT_MEASURE,.fsmagic = SYSFS_MAGIC,.flags = IMA_FSMAGIC},
|
|
{.action = DONT_MEASURE,.fsmagic = DEBUGFS_MAGIC,.flags = IMA_FSMAGIC},
|
|
{.action = DONT_MEASURE,.fsmagic = DEBUGFS_MAGIC,.flags = IMA_FSMAGIC},
|
|
{.action = DONT_MEASURE,.fsmagic = TMPFS_MAGIC,.flags = IMA_FSMAGIC},
|
|
{.action = DONT_MEASURE,.fsmagic = TMPFS_MAGIC,.flags = IMA_FSMAGIC},
|
|
- {.action = DONT_MEASURE,.fsmagic = SECURITYFS_MAGIC,
|
|
|
|
- .flags = IMA_FSMAGIC},
|
|
|
|
- {.action = DONT_MEASURE,.fsmagic = 0xF97CFF8C,.flags = IMA_FSMAGIC},
|
|
|
|
|
|
+ {.action = DONT_MEASURE,.fsmagic = SECURITYFS_MAGIC,.flags = IMA_FSMAGIC},
|
|
|
|
+ {.action = DONT_MEASURE,.fsmagic = SELINUX_MAGIC,.flags = IMA_FSMAGIC},
|
|
{.action = MEASURE,.func = FILE_MMAP,.mask = MAY_EXEC,
|
|
{.action = MEASURE,.func = FILE_MMAP,.mask = MAY_EXEC,
|
|
.flags = IMA_FUNC | IMA_MASK},
|
|
.flags = IMA_FUNC | IMA_MASK},
|
|
{.action = MEASURE,.func = BPRM_CHECK,.mask = MAY_EXEC,
|
|
{.action = MEASURE,.func = BPRM_CHECK,.mask = MAY_EXEC,
|