[Linux-ima-user] measure the specific file even no operations on it.

[Jason C. <jas...@gm...>]

Hi all,

The selinux extend to the measument list could be written like 'measure
func=FILE_CHECK mask=MAY_READ obj_type=my_app_t'. Where could I find
document about the selinux extension ? For example, how many mask could
there be?  If I want to measuremnt some files after system on even no
operations(no read or exec ops ) on these files, how to write the policy
file ?

Thanks for your reply!

Thanks and regards,
Jason