diff options
| author | Deven Bowers <deven.desai@linux.microsoft.com> | 2024-08-02 23:08:16 -0700 |
|---|---|---|
| committer | Paul Moore <paul@paul-moore.com> | 2024-08-20 14:01:00 -0400 |
| commit | 54a88cd259204f80672393602501567c74d64106 (patch) | |
| tree | 66ffa61d94a4ed99203947607b027351a90e5b72 /security/ipe/Makefile | |
| parent | 0311507792b54069ac72e0a6c6b35c5d40aadad8 (diff) | |
| download | linux-next-54a88cd259204f80672393602501567c74d64106.tar.gz linux-next-54a88cd259204f80672393602501567c74d64106.zip | |
ipe: add policy parser
IPE's interpretation of the what the user trusts is accomplished through
its policy. IPE's design is to not provide support for a single trust
provider, but to support multiple providers to enable the end-user to
choose the best one to seek their needs.
This requires the policy to be rather flexible and modular so that
integrity providers, like fs-verity, dm-verity, or some other system,
can plug into the policy with minimal code changes.
Signed-off-by: Deven Bowers <deven.desai@linux.microsoft.com>
Signed-off-by: Fan Wu <wufan@linux.microsoft.com>
[PM: added NULL check in parse_rule() as discussed]
Signed-off-by: Paul Moore <paul@paul-moore.com>
Diffstat (limited to 'security/ipe/Makefile')
| -rw-r--r-- | security/ipe/Makefile | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/security/ipe/Makefile b/security/ipe/Makefile index 5486398a69e9..3093de1afd3e 100644 --- a/security/ipe/Makefile +++ b/security/ipe/Makefile @@ -7,3 +7,5 @@ obj-$(CONFIG_SECURITY_IPE) += \ ipe.o \ + policy.o \ + policy_parser.o \ |