tree bce41e39722ae178807abe2213fd94e582842bae
parent a200005038955057063fc8ea82129ebc785df41c
author Eric Paris <eparis@redhat.com> 1271773254 -0400
committer James Morris <jmorris@namei.org> 1271807893 +1000

ima: handle multiple rules per write

Currently IMA will only accept one rule per write().  This patch allows IMA to
accept writes which contain multiple rules but only processes one rule per
write.  \n is used as the delimiter between rules.  IMA will return a short
write indicating that it only accepted up to the first \n.

This allows simple userspace utilities like cat to be used to load an IMA
policy instead of needing a special userspace utility that understood 'one
write per rule'

Signed-off-by: Eric Paris <eparis@redhat.com>
Acked-by: Mimi Zohar <zohar@us.ibm.com>
Signed-off-by: James Morris <jmorris@namei.org>