Re: [PATCH 1/2] ima: add policy support for identifying file execute mode bit

[Lakshmi Ramasubramanian]

On 4/29/20 6:38 AM, Mimi Zohar wrote:

> Extend the IMA policy language with "mode=IXUGO" to identify files with
> the execute mode bit enabled.
>
> Examples:
> measure func=FILE_CHECK mode=IXUGO
> appraise func=FILE_CHECK appraise_type=imasig mode=IXUGO
>
> Suggested-by: Steve Grubb <sgrubb@xxxxxxxxxx> (based on execute mode bit)
> Signed-off-by: Mimi Zohar <zohar@xxxxxxxxxxxxx>

Reviewed.