]> www.infradead.org Git - nvme.git/commit
ima: ignore suffixed policy rule comments
authorMimi Zohar <zohar@linux.ibm.com>
Fri, 27 Dec 2024 13:28:32 +0000 (08:28 -0500)
committerMimi Zohar <zohar@linux.ibm.com>
Fri, 3 Jan 2025 15:18:43 +0000 (10:18 -0500)
commit4785ed362a24d4f37ee0eb4403f587fee886f8da
treeac0d5cda786fdcde696c971748355b712bf44dbf
parent7eef7c8bac9a31f12ae19369582bc25971bc8fe1
ima: ignore suffixed policy rule comments

Lines beginning with '#' in the IMA policy are comments and are ignored.
Instead of placing the rule and comment on separate lines, allow the
comment to be suffixed to the IMA policy rule.

Reviewed-by: Petr Vorel <pvorel@suse.cz>
Reviewed-by: Jarkko Sakkinen <jarkko@kernel.org>
Signed-off-by: Mimi Zohar <zohar@linux.ibm.com>
security/integrity/ima/ima_policy.c