Lines Matching full:measure
7 * - initialize default measure policy rules
43 #define MEASURE 0x0001 /* same as IMA_MEASURE */ macro
98 struct ima_rule_opt_list *keyrings; /* Measure keys added to these keyrings */
99 struct ima_rule_opt_list *label; /* Measure data grouped under this label */
142 {.action = MEASURE, .func = MMAP_CHECK, .mask = MAY_EXEC,
144 {.action = MEASURE, .func = BPRM_CHECK, .mask = MAY_EXEC,
146 {.action = MEASURE, .func = FILE_CHECK, .mask = MAY_READ,
149 {.action = MEASURE, .func = MODULE_CHECK, .flags = IMA_FUNC},
150 {.action = MEASURE, .func = FIRMWARE_CHECK, .flags = IMA_FUNC},
154 {.action = MEASURE, .func = MMAP_CHECK, .mask = MAY_EXEC,
156 {.action = MEASURE, .func = BPRM_CHECK, .mask = MAY_EXEC,
158 {.action = MEASURE, .func = FILE_CHECK, .mask = MAY_READ,
161 {.action = MEASURE, .func = FILE_CHECK, .mask = MAY_READ,
164 {.action = MEASURE, .func = MODULE_CHECK, .flags = IMA_FUNC},
165 {.action = MEASURE, .func = FIRMWARE_CHECK, .flags = IMA_FUNC},
166 {.action = MEASURE, .func = POLICY_CHECK, .flags = IMA_FUNC},
229 {.action = MEASURE, .func = CRITICAL_DATA, .flags = IMA_FUNC},
486 * @func_data: data to match against the measure rule data
683 * Measure decision based on func/mask/fsmagic and LSM(subj/obj/type)
889 * ima_init_policy - initialize the default measure rules.
978 * ima_update_policy - update default_rules with new measure rules
1033 {Opt_measure, "measure"},
1198 if (entry->action != MEASURE && entry->flags & IMA_PCR) in ima_validate_rule()
1253 if (entry->action & ~(MEASURE | DONT_MEASURE)) in ima_validate_rule()
1264 if (entry->action & ~(MEASURE | DONT_MEASURE)) in ima_validate_rule()
1276 if (entry->action & ~(MEASURE | DONT_MEASURE)) in ima_validate_rule()
1389 ima_log_string(ab, "action", "measure"); in ima_parse_rule()
1394 entry->action = MEASURE; in ima_parse_rule()
1816 if (entry->action != MEASURE) { in ima_parse_rule()
1854 if (!result && entry->action == MEASURE && in ima_parse_rule()
2039 if (entry->action & MEASURE) in ima_policy_show()