[RFC 11/11] ima: appraise mode per namespace with new enforce_ns appraise mode

2017-05-11 Thread Guilherme Magalhaes
Global ima_appraise renamed to ima_appraise_mode and it saves the initial appraise mode. It is used to initialize the ima_appraise ima_ns_policy field when the policy is defined by user the first time for a namespace. New 'enforce_ns' appraise mode created. On this new appraise mode, the initial

[RFC 11/11] ima: appraise mode per namespace with new enforce_ns appraise mode

2017-05-11 Thread Guilherme Magalhaes
Global ima_appraise renamed to ima_appraise_mode and it saves the initial appraise mode. It is used to initialize the ima_appraise ima_ns_policy field when the policy is defined by user the first time for a namespace. New 'enforce_ns' appraise mode created. On this new appraise mode, the initial