ima_parse_add_rule(9)
π ima_parse_add_rule(9) π
okay so this is the Kernel API Manual page for ima_parse_add_rule, and it's literally here to add a rule to ima_policy_rules. bestie, it's giving short-and-iconic kernel helper energy. π
β¨
β¨ NAME β¨
ima_parse_add_rule β add a rule to ima_policy_rules
π¦ SYNOPSIS π¦
ssize_t ima_parse_add_rule (char *rule );
πΈ ARGUMENTS πΈ
ruleβ the ima measurement policy rule. that's the thing you're handing over, no cap. π«Ά
π DESCRIPTION π
So the vibe is: avoid locking by allowing just one writer at a time in ima_write_policy. that's the whole move. π
It returns the length of the rule parsed, or an error code on failure. slay when it parses, sad little error code when it doesn't. π
π₯ SEE ALSO π₯
- Kernel file:
./security/integrity/ima/ima_policy.c ima_match_rule_data(9)ima_match_rules(9)ima_match_policy(9)ima_update_policy_flags(9)ima_init_policy(9)ima_update_policy(9)ima_delete_rules(9)ima_measure_loaded_policy(9)
xoxo, your kernel API bestie π β source/version: ./security/integrity/ima, October 2026. πβ¨
π¦ where this page comes from
- nixpkgs unstable: linux-manual 7.3.1
- π girlified by deepseek-ai/DeepSeek-V4.1-Flash-1017 on : a language model's rewrite of the original, under its terms