diff options
Diffstat (limited to 'Documentation/kernel-parameters.txt')
| -rw-r--r-- | Documentation/kernel-parameters.txt | 11 |
1 files changed, 10 insertions, 1 deletions
diff --git a/Documentation/kernel-parameters.txt b/Documentation/kernel-parameters.txt index 9ca3e74a10e1..50680a59a2ff 100644 --- a/Documentation/kernel-parameters.txt +++ b/Documentation/kernel-parameters.txt | |||
| @@ -1190,15 +1190,24 @@ bytes respectively. Such letter suffixes can also be entirely omitted. | |||
| 1190 | owned by uid=0. | 1190 | owned by uid=0. |
| 1191 | 1191 | ||
| 1192 | ima_hash= [IMA] | 1192 | ima_hash= [IMA] |
| 1193 | Format: { "sha1" | "md5" } | 1193 | Format: { md5 | sha1 | rmd160 | sha256 | sha384 |
| 1194 | | sha512 | ... } | ||
| 1194 | default: "sha1" | 1195 | default: "sha1" |
| 1195 | 1196 | ||
| 1197 | The list of supported hash algorithms is defined | ||
| 1198 | in crypto/hash_info.h. | ||
| 1199 | |||
| 1196 | ima_tcb [IMA] | 1200 | ima_tcb [IMA] |
| 1197 | Load a policy which meets the needs of the Trusted | 1201 | Load a policy which meets the needs of the Trusted |
| 1198 | Computing Base. This means IMA will measure all | 1202 | Computing Base. This means IMA will measure all |
| 1199 | programs exec'd, files mmap'd for exec, and all files | 1203 | programs exec'd, files mmap'd for exec, and all files |
| 1200 | opened for read by uid=0. | 1204 | opened for read by uid=0. |
| 1201 | 1205 | ||
| 1206 | ima_template= [IMA] | ||
| 1207 | Select one of defined IMA measurements template formats. | ||
| 1208 | Formats: { "ima" | "ima-ng" } | ||
| 1209 | Default: "ima-ng" | ||
| 1210 | |||
| 1202 | init= [KNL] | 1211 | init= [KNL] |
| 1203 | Format: <full_path> | 1212 | Format: <full_path> |
| 1204 | Run specified binary instead of /sbin/init as init | 1213 | Run specified binary instead of /sbin/init as init |
