# Copyright 2016 The Chromium OS Authors. All rights reserved.
# Use of this source code is governed by a BSD-style license that can be
# found in the LICENSE file.
#
# IMA policy that includes runtime auditing of executable files and libraries.
#
# For information on the grammar for IMA policies, see
# http://www.kernel.org/doc/Documentation/ABI/testing/ima_policy
# magic numbers come from /usr/include/linux/magic.h
# PROC_SUPER_MAGIC
dont_measure fsmagic=0x9fa0
# SYSFS_MAGIC
dont_measure fsmagic=0x62656572
# DEBUGFS_MAGIC
dont_measure fsmagic=0x64626720
# TMPFS_MAGIC
dont_measure fsmagic=0x01021994
# RAMFS_MAGIC
dont_measure fsmagic=0x858458f6
# DEVPTS_SUPER_MAGIC
dont_measure fsmagic=0x1cd1
# BIFMT
dont_measure fsmagic=0x42494e4d
# SECURITYFS_MAGIC
dont_measure fsmagic=0x73636673
# SELINUXFS_MAGIC
dont_measure fsmagic=0xf97cff8c
# audit files executed.
audit func=BPRM_CHECK
# audit executable libraries mmap'd.
audit func=FILE_MMAP mask=MAY_EXEC