ima_get_action(9)

💖 ima_get_action(9) 💖

okay so bestie, welcome to the Kernel API Manual page for ima_get_action(9) — the appraise & measure decision based on policy one. we're doing this like a group chat, but every single detail is staying. no cap. 💅

🎀 NAME 🎀

ima_get_action — appraise & measure decision based on policy.

✨ SYNOPSIS ✨

       int ima_get_action (struct mnt_idmap *idmap , struct inode *inode ,
       const struct cred *cred , struct lsm_prop *prop , int mask , enum
       ima_hooks func , int *pcr , struct ima_template_desc **template_desc ,
       const char *func_data , unsigned int *allowed_algos );

🫶 ARGUMENTS 🫶

• idmap — idmap of the mount the inode was found from.
• inode — pointer to the inode associated with the object being validated.
• cred — pointer to credentials structure to validate.
• prop — properties of the task being validated.
• mask — contains the permission mask (MAY_READ, MAY_WRITE, MAY_EXEC, MAY_APPEND).
• func — caller identifier.
• pcr — pointer filled in if matched measure policy sets pcr=.
• template_desc — pointer filled in if matched measure policy sets template=.
• func_data — func specific data, may be NULL.
• allowed_algos — allowlist of hash algorithms for the IMA xattr.

🧚 DESCRIPTION 🧚

The policy is defined in terms of keypairs: subj=, obj=, type=, func=, mask=, fsmagic=. The subj, obj, and type: are LSM specific.

For func:, the values are FILE_CHECK | BPRM_CHECK | CREDS_CHECK | MMAP_CHECK | MODULE_CHECK | KEXEC_CMDLINE | KEY_CHECK | CRITICAL_DATA | SETXATTR_CHECK | MMAP_CHECK_REQPROT.

mask: contains the permission mask. fsmagic: is a hex value.

Returns IMA_MEASURE, IMA_APPRAISE mask.

🌈 SEE ALSO 🌈

• Kernel file ./security/integrity/ima/ima_api.c

mwah 💋 this page comes from source/version ./security/integrity/ima, dated October 2026 — xoxo, your kernel bestie. ima_get_action(9) out. 🫶✨