linux/Documentation/admin-guide/LSM/LoadPin.rst, branch v5.8Mirror of https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/
https://git.shady.money/linux/atom?h=v5.82019-05-31T20:57:40Zsecurity/loadpin: Allow to exclude specific file types2019-05-31T20:57:40ZKe Wumikewu@google.com2019-05-30T19:22:08Zurn:sha1:0ff9848067b7b950a4ed70de7f5028600a2157e3
Linux kernel already provide MODULE_SIG and KEXEC_VERIFY_SIG to
make sure loaded kernel module and kernel image are trusted. This
patch adds a kernel command line option "loadpin.exclude" which
allows to exclude specific file types from LoadPin. This is useful
when people want to use different mechanisms to verify module and
kernel image while still use LoadPin to protect the integrity of
other files kernel loads.
Signed-off-by: Ke Wu <mikewu@google.com>
Reviewed-by: James Morris <jamorris@linux.microsoft.com>
[kees: fix array size issue reported by Coverity via Colin Ian King]
Signed-off-by: Kees Cook <keescook@chromium.org>
doc: ReSTify LoadPin.txt2017-05-18T16:33:12ZKees Cookkeescook@chromium.org2017-05-13T11:51:48Zurn:sha1:30da4f77aae99bf9ae5905d0ef89668391eea315
Adjusts for ReST markup and moves under LSM admin guide.
Signed-off-by: Kees Cook <keescook@chromium.org>
Signed-off-by: Jonathan Corbet <corbet@lwn.net>