tree df323588d1026b947e489c5fb9c83299dbcb9689
parent 6593d9245bc66e6e3cf4ba6d365a7833110c1402
author Mimi Zohar <zohar@linux.vnet.ibm.com> 1406039988 -0400
committer Kees Cook <keescook@chromium.org> 1406314066 -0700

ima: add support for measuring and appraising firmware

The "security: introduce kernel_fw_from_file hook" patch defined a
new security hook to evaluate any loaded firmware that wasn't built
into the kernel.

This patch defines ima_fw_from_file(), which is called from the new
security hook, to measure and/or appraise the loaded firmware's
integrity.

Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>
Signed-off-by: Kees Cook <keescook@chromium.org>