Lines Matching refs:IMA
4 config IMA config
5 bool "Integrity Measurement Architecture(IMA)"
19 Measurement Architecture(IMA) maintains a list of hash
25 If your system has a TPM chip, then IMA also maintains
30 to learn more about IMA.
34 bool "Enable carrying the IMA measurement list across a soft boot"
35 depends on IMA && TCG_TPM && HAVE_IMA_KEXEC
39 a TPM's quote after a soft boot, the IMA measurement list of the
42 Depending on the IMA policy, the measurement list can grow to
47 depends on IMA
52 that IMA uses to maintain the integrity aggregate of the
57 depends on IMA && AUDIT && (SECURITY_SELINUX || SECURITY_SMACK)
65 depends on IMA
67 Select the default IMA measurement template.
85 depends on IMA
93 depends on IMA
119 depends on IMA
126 bool "Enable multiple writes to the IMA policy"
127 depends on IMA
130 IMA policy can now be updated multiple times. The new rules get
137 bool "Enable reading back the current IMA policy"
138 depends on IMA
142 It is often useful to be able to read back the IMA policy. It is
148 depends on IMA
162 bool "Enable loading an IMA architecture specific policy"
163 depends on (KEXEC_SIG && IMA) || IMA_APPRAISE \
167 This option enables loading an IMA architecture specific policy
171 bool "IMA build time configured policy rules"
175 This option defines an IMA appraisal policy at build time, which
181 modules, firmware, the kexec kernel image, and/or the IMA policy
201 be signed and verified by a public key on the trusted IMA
214 and verified by a public key on the trusted IMA keyring.
216 Kernel module signatures can only be verified by IMA-appraisal,
221 bool "Appraise IMA policy signature"
225 Enabling this rule will require the IMA policy to be signed and
226 and verified by a key on the trusted IMA keyring.
246 The modsig keyword can be used in the IMA policy to allow a hook
269 Keys may be added to the IMA or IMA blacklist keyrings, if the
274 IMA keys to be added may be added to the system secondary keyring,
279 bool "Create IMA machine owner blacklist keyrings (EXPERIMENTAL)"
284 This option creates an IMA blacklist keyring, which contains all
285 revoked IMA keys. It is consulted before any other keyring. If
301 string "IMA X509 certificate path"
305 This option defines IMA X509 certificate path.