linux/security/ipe
Deven Bowers ba199dc909 scripts: add boot policy generation program
Enables an IPE policy to be enforced from kernel start, enabling access
control based on trust from kernel startup. This is accomplished by
transforming an IPE policy indicated by CONFIG_IPE_BOOT_POLICY into a
c-string literal that is parsed at kernel startup as an unsigned policy.

Signed-off-by: Deven Bowers <deven.desai@linux.microsoft.com>
Signed-off-by: Fan Wu <wufan@linux.microsoft.com>
Signed-off-by: Paul Moore <paul@paul-moore.com>
2024-08-20 14:03:39 -04:00
..
.gitignore scripts: add boot policy generation program 2024-08-20 14:03:39 -04:00
audit.c ipe: enable support for fs-verity as a trust provider 2024-08-20 14:03:35 -04:00
audit.h ipe: add permissive toggle 2024-08-20 14:02:27 -04:00
digest.c ipe: add support for dm-verity as a trust provider 2024-08-20 14:02:45 -04:00
digest.h ipe: add support for dm-verity as a trust provider 2024-08-20 14:02:45 -04:00
eval.c ipe: enable support for fs-verity as a trust provider 2024-08-20 14:03:35 -04:00
eval.h ipe: enable support for fs-verity as a trust provider 2024-08-20 14:03:35 -04:00
fs.c scripts: add boot policy generation program 2024-08-20 14:03:39 -04:00
fs.h ipe: add userspace interface 2024-08-20 14:02:15 -04:00
hooks.c ipe: enable support for fs-verity as a trust provider 2024-08-20 14:03:35 -04:00
hooks.h ipe: enable support for fs-verity as a trust provider 2024-08-20 14:03:35 -04:00
ipe.c scripts: add boot policy generation program 2024-08-20 14:03:39 -04:00
ipe.h ipe: enable support for fs-verity as a trust provider 2024-08-20 14:03:35 -04:00
Kconfig scripts: add boot policy generation program 2024-08-20 14:03:39 -04:00
Makefile scripts: add boot policy generation program 2024-08-20 14:03:39 -04:00
policy_fs.c ipe: add userspace interface 2024-08-20 14:02:15 -04:00
policy_parser.c ipe: enable support for fs-verity as a trust provider 2024-08-20 14:03:35 -04:00
policy_parser.h
policy.c audit,ipe: add IPE auditing support 2024-08-20 14:02:22 -04:00
policy.h ipe: enable support for fs-verity as a trust provider 2024-08-20 14:03:35 -04:00