Integrity Measurement Architecture丨security/ima/policy

from： Documentation/ABI/testing/ima_policy
If there is infringement, contact me to delete

		The Trusted Computing Group(TCG) runtime Integrity
	Measurement Architecture(IMA) maintains a list of hash
	values of executables and other sensitive system files
	loaded into the run-time of this system.  At runtime,
	the policy can be constrained based on LSM specific data.
	Policies are loaded into the securityfs file ima/policy
	by opening the file, writing the rules one at a time and
	then closing the file.  The new policy takes effect after
	the file ima/policy is closed.

	IMA appraisal, if configured, uses these file measurements
	for local measurement appraisal.

	rule format: action [condition ...]

	action: measure | dont_measure | appraise | dont_appraise | audit
	condition:= base | lsm  [option]
		base:	[[func=] [mask=] [fsmagic=] [fsuuid=] [uid=]
			[euid=] [fowner=]]
		lsm:	[[subj_user=]