tree ee3c83ca967003972763fb18de707bd7cc5bb58f
parent 67696f6d79923cdc0084b73b4bbe52e6749a43a4
author Eric Richter <erichte@linux.vnet.ibm.com> 1464804846 -0500
committer Mimi Zohar <zohar@linux.vnet.ibm.com> 1467263662 -0400

ima: change integrity cache to store measured pcr

IMA avoids re-measuring files by storing the current state as a flag in
the integrity cache. It will then skip adding a new measurement log entry
if the cache reports the file as already measured.

If a policy measures an already measured file to a new PCR, the measurement
will not be added to the list. This patch implements a new bitfield for
specifying which PCR the file was measured into, rather than if it was
measured.

Signed-off-by: Eric Richter <erichte@linux.vnet.ibm.com>
Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>