Lines Matching full:measure
7 * - initialize default measure policy rules
43 #define MEASURE 0x0001 /* same as IMA_MEASURE */ macro
122 struct ima_rule_opt_list *keyrings; /* Measure keys added to these keyrings */
123 struct ima_rule_opt_list *label; /* Measure data grouped under this label */
167 {.action = MEASURE, .func = MMAP_CHECK, .mask = MAY_EXEC,
169 {.action = MEASURE, .func = BPRM_CHECK, .mask = MAY_EXEC,
171 {.action = MEASURE, .func = FILE_CHECK, .mask = MAY_READ,
174 {.action = MEASURE, .func = MODULE_CHECK, .flags = IMA_FUNC},
175 {.action = MEASURE, .func = FIRMWARE_CHECK, .flags = IMA_FUNC},
179 {.action = MEASURE, .func = MMAP_CHECK, .mask = MAY_EXEC,
181 {.action = MEASURE, .func = BPRM_CHECK, .mask = MAY_EXEC,
183 {.action = MEASURE, .func = FILE_CHECK, .mask = MAY_READ,
186 {.action = MEASURE, .func = FILE_CHECK, .mask = MAY_READ,
189 {.action = MEASURE, .func = MODULE_CHECK, .flags = IMA_FUNC},
190 {.action = MEASURE, .func = FIRMWARE_CHECK, .flags = IMA_FUNC},
191 {.action = MEASURE, .func = POLICY_CHECK, .flags = IMA_FUNC},
254 {.action = MEASURE, .func = CRITICAL_DATA, .flags = IMA_FUNC},
509 * @func_data: data to match against the measure rule data
734 * Measure decision based on func/mask/fsmagic and LSM(subj/obj/type)
940 * ima_init_policy - initialize the default measure rules.
1029 * ima_update_policy - update default_rules with new measure rules
1084 {Opt_measure, "measure"},
1250 if (entry->action != MEASURE && entry->flags & IMA_PCR) in ima_validate_rule()
1306 if (entry->action & ~(MEASURE | DONT_MEASURE)) in ima_validate_rule()
1317 if (entry->action & ~(MEASURE | DONT_MEASURE)) in ima_validate_rule()
1329 if (entry->action & ~(MEASURE | DONT_MEASURE)) in ima_validate_rule()
1442 ima_log_string(ab, "action", "measure"); in ima_parse_rule()
1447 entry->action = MEASURE; in ima_parse_rule()
1866 if (entry->action != MEASURE) { in ima_parse_rule()
1904 if (!result && entry->action == MEASURE && in ima_parse_rule()
2090 if (entry->action & MEASURE) in ima_policy_show()