diff options
| author | Deven Bowers <deven.desai@linux.microsoft.com> | 2024-08-03 09:08:15 +0300 |
|---|---|---|
| committer | Paul Moore <paul@paul-moore.com> | 2024-08-20 05:36:26 +0300 |
| commit | 0311507792b54069ac72e0a6c6b35c5d40aadad8 (patch) | |
| tree | 6d74be50e686df975fdec73c65ce920826f2ae32 /include/uapi/linux | |
| parent | 9ee6881454345c4bb518e9478415b32731da9858 (diff) | |
| download | linux-0311507792b54069ac72e0a6c6b35c5d40aadad8.tar.xz | |
lsm: add IPE lsm
Integrity Policy Enforcement (IPE) is an LSM that provides an
complimentary approach to Mandatory Access Control than existing LSMs
today.
Existing LSMs have centered around the concept of access to a resource
should be controlled by the current user's credentials. IPE's approach,
is that access to a resource should be controlled by the system's trust
of a current resource.
The basis of this approach is defining a global policy to specify which
resource can be trusted.
Signed-off-by: Deven Bowers <deven.desai@linux.microsoft.com>
Signed-off-by: Fan Wu <wufan@linux.microsoft.com>
[PM: subject line tweak]
Signed-off-by: Paul Moore <paul@paul-moore.com>
Diffstat (limited to 'include/uapi/linux')
| -rw-r--r-- | include/uapi/linux/lsm.h | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/include/uapi/linux/lsm.h b/include/uapi/linux/lsm.h index 33d8c9f4aa6b..938593dfd5da 100644 --- a/include/uapi/linux/lsm.h +++ b/include/uapi/linux/lsm.h @@ -64,6 +64,7 @@ struct lsm_ctx { #define LSM_ID_LANDLOCK 110 #define LSM_ID_IMA 111 #define LSM_ID_EVM 112 +#define LSM_ID_IPE 113 /* * LSM_ATTR_XXX definitions identify different LSM attributes |