Developers from Microsoft integrity verification mechanism (Integrity Policy Enforcement), implemented as an LSM module (Linux Security Module) for the Linux kernel. This module allows defining an overall integrity assurance policy for the system, indicating which operations are permissible and how to verify the authenticity of components. With IPE, you can specify which executable files are allowed to run and ensure that these files are identical to the version provided by a trusted source. Code is licensed under the MIT License.
IPE aims to create fully verifiable systems, whose integrity is confirmed from the initial bootloader and kernel to the final executable files, configuration, and loaded files. In case of modification or substitution of a file, IPE can block the operation or log the integrity violation. The proposed mechanism can be applied in firmware for embedded devices, where all software and settings are specifically assembled and provided by the owner, for example, in data centers. Microsoft uses IPE in its equipment for firewalls.
Unlike other integrity verification systems, such as , IPE is independent of the metadata in the file system — all properties that define the permissibility of operations are stored directly in the kernel. Existing kernel mechanisms are used to verify the integrity of file contents based on cryptographic hashes.
or .
Similar to SELinux, it supports two operating modes: 'permissive' and 'enforce'. In the first mode, only logs of problems during checks are maintained, which, for example, can be used for preliminary testing of the environment.
Source: opennet.ru
