Skip to content

refactor: rename IMAMeasurementActive to IMAAnyMeasurementActive#57

Merged
leodido merged 2 commits into
mainfrom
rename-ima-any-measurement-active
May 12, 2026
Merged

refactor: rename IMAMeasurementActive to IMAAnyMeasurementActive#57
leodido merged 2 commits into
mainfrom
rename-ima-any-measurement-active

Conversation

@leodido
Copy link
Copy Markdown
Owner

@leodido leodido commented May 12, 2026

Breaking rename that clarifies the IMA measurement probe semantics.

Breaking

Renamed FeatureIMAMeasurementActiveFeatureIMAAnyMeasurementActive, ProbeIMAMeasurementActive()ProbeIMAAnyMeasurementActive(), and the SystemFeatures.IMAMeasurementActive field → IMAAnyMeasurementActive. The previous name implied the probe identified which func= rule was active; the new name clarifies it only detects that at least one IMA measurement has occurred. The CLI feature name changes from ima-measurement-active to ima-any-measurement-active. The String() output now includes the IMA any measurement active line in the Security Subsystems section.

Motivation

ProbeIMAMeasurementActive conflates "some IMA measurement happened" with "the specific measurement rule my caller needs is active." When runtime_measurements_count > 1, it returns Supported: true without identifying which func= rule caused the measurement. A caller needing func=BPRM_CHECK for exec hashing (to use bpf_ima_file_hash) could get a false positive if the measurements came from a different rule.

This rename is the first step toward a clearer API boundary. Follow-up PRs will add func-specific probes (ProbeIMAExecMeasurementActive, ProbeIMAFileCheckMeasurementActive) and a raw ReadIMARuntimeMeasurementsCount diagnostic helper.

The previous name implied the probe identified which func= rule was
active; the new name clarifies it only detects that at least one
measurement rule has fired.

Co-authored-by: Ona <no-reply@ona.com>
@github-actions github-actions Bot added the enhancement New feature or request label May 12, 2026
@leodido leodido self-assigned this May 12, 2026
Replace 'active measurement policy' and 'measurement rule has fired'
with 'measurement has occurred' throughout doc comments, diagnostics,
README, and CHANGELOG. Move CHANGELOG entry to ### Breaking.

Co-authored-by: Ona <no-reply@ona.com>
@leodido leodido merged commit 354823c into main May 12, 2026
6 checks passed
@leodido leodido deleted the rename-ima-any-measurement-active branch May 12, 2026 11:18
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

enhancement New feature or request

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant