From mboxrd@z Thu Jan 1 00:00:00 1970 From: Stefan Berger Subject: [PATCH v3] 98integrity: Use /etc/ima as dir for IMA policy and config file Date: Wed, 30 Nov 2016 11:18:54 -0500 Message-ID: <1480522734-975-1-git-send-email-stefanb@linux.vnet.ibm.com> Mime-Version: 1.0 Content-Transfer-Encoding: base64 Return-path: List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: systemd-devel-bounces@lists.freedesktop.org Sender: "systemd-devel" Content-Type: text/plain; charset="us-ascii" To: initramfs@vger.kernel.org, harald@redhat.com Cc: linux-ima-user@lists.sourceforge.net, systemd-devel@lists.freedesktop.org, Stefan Berger RnJvbTogU3RlZmFuIEJlcmdlciA8c3RlZmFuYkB1cy5pYm0uY29tPgoKVG8gc3luYyB3aXRoIHN5 c3RlbWQsIHVzZSB0aGUgZmlsZXBhdGggL2V0Yy9pbWEvaW1hLXBvbGljeSBhcwp0aGUgZGVmYXVs dCBmaWxlIGxvY2F0aW9uIGZvciB0aGUgSU1BIHBvbGljeS4gQXQgdGhlIHNhbWUgdGltZSB3ZQpt b3ZlIHRoZSBpbWEgY29uZmlnIGZpbGUgbG9jYXRpb24gdG8gL2V0Yy9pbWEvaW1hLiBBZGFwdCB0 aGUKZG9jdW1lbnRhdGlvbiB0byB0aGUgbmV3IHBhdGguIE1haW50YWluIGJhY2t3YXJkcyBjb21w YXRpYmlsaXR5CmJ5IHN0aWxsIHJlYWRpbmcgdGhlIG9sZCBmaWxlcyBpbiBjYXNlIHRoZSBuZXcg b25lcyBkbyBub3QgZXhpc3QuCgpTaWduZWQtb2ZmLWJ5OiBTdGVmYW4gQmVyZ2VyIDxzdGVmYW5i QGxpbnV4LnZuZXQuaWJtLmNvbT4KLS0tCiBtb2R1bGVzLmQvOThpbnRlZ3JpdHkvUkVBRE1FICAg ICAgICAgICAgIHwgIDggKysrKy0tLS0KIG1vZHVsZXMuZC85OGludGVncml0eS9pbWEta2V5cy1s b2FkLnNoICAgfCAgNyArKysrKystCiBtb2R1bGVzLmQvOThpbnRlZ3JpdHkvaW1hLXBvbGljeS1s b2FkLnNoIHwgMjAgKysrKysrKysrKysrKysrKystLS0KIDMgZmlsZXMgY2hhbmdlZCwgMjcgaW5z ZXJ0aW9ucygrKSwgOCBkZWxldGlvbnMoLSkKCmRpZmYgLS1naXQgYS9tb2R1bGVzLmQvOThpbnRl Z3JpdHkvUkVBRE1FIGIvbW9kdWxlcy5kLzk4aW50ZWdyaXR5L1JFQURNRQppbmRleCA2NGRlMGFl Li5jOGNjZWU1IDEwMDY0NAotLS0gYS9tb2R1bGVzLmQvOThpbnRlZ3JpdHkvUkVBRE1FCisrKyBi L21vZHVsZXMuZC85OGludGVncml0eS9SRUFETUUKQEAgLTMzLDEwICszMywxMCBAQCBsaW5lLgog CiAjIFNhdmUgdGhlIHBvbGljeSBpbiBhIGZpbGUuCiAKLSMgQ3JlYXRlIHRoZSBjb25maWd1cmF0 aW9uIGZpbGUgJy9ldGMvc3lzY29uZmlnL2ltYScgdG8gb3ZlcnJpZGUgdGhlIHBhdGggbmFtZSBv ZgorIyBDcmVhdGUgdGhlIGNvbmZpZ3VyYXRpb24gZmlsZSAnL2V0Yy9pbWEvaW1hJyB0byBvdmVy cmlkZSB0aGUgcGF0aCBuYW1lIG9mCiAjIHRoZSBJTUEgY3VzdG9tIHBvbGljeS4KLS0tLS0tLS0t LS0tLS0gJy9ldGMvc3lzY29uZmlnL2ltYScgKHdpdGggdGhlIGRlZmF1bHQgdmFsdWUpIC0tLS0t LS0tLS0tLS0KLUlNQVBPTElDWT0iL2V0Yy9zeXNjb25maWcvaW1hLXBvbGljeSIKKy0tLS0tLS0t LS0tLS0gJy9ldGMvaW1hL2ltYScgKHdpdGggdGhlIGRlZmF1bHQgdmFsdWUpIC0tLS0tLS0tLS0t LS0KK0lNQVBPTElDWT0iL2V0Yy9pbWEvaW1hLXBvbGljeSIKIC0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0KIAog CkBAIC02NCw1ICs2NCw1IEBAIElNQVBPTElDWT0iL2V0Yy9zeXNjb25maWcvaW1hLXBvbGljeSIK IAogIyA5OGludGVncml0eS9pbWEta2V5cy1sb2FkLnNoIHNjcmlwdCBsb2FkcyB0aGUgc2lnbmVk IGNlcnRpZmljYXRlcyBzdG9yZWQgCiAjIGluIHRoZSAkSU1BS0VZU0RJUiBvbnRvIHRoZSB0cnVz dGVkIElNQSBrZXlyaW5nLiAgVGhlIGRlZmF1bHQgJElNQUtFWVNESVIKLSMgZGlyZWN0b3J5IGlz IC9ldGMva2V5cy9pbWEsIGJ1dCBjYW4gYmUgc3BlY2lmaWVkIGluIHRoZSAvZXRjL3N5c2NvbmZp Zy9pbWEKKyMgZGlyZWN0b3J5IGlzIC9ldGMva2V5cy9pbWEsIGJ1dCBjYW4gYmUgc3BlY2lmaWVk IGluIHRoZSAvZXRjL2ltYS9pbWEKICMgcG9saWN5LgpkaWZmIC0tZ2l0IGEvbW9kdWxlcy5kLzk4 aW50ZWdyaXR5L2ltYS1rZXlzLWxvYWQuc2ggYi9tb2R1bGVzLmQvOThpbnRlZ3JpdHkvaW1hLWtl eXMtbG9hZC5zaAppbmRleCA2NTliNzIyLi45MjJhZjFlIDEwMDc1NQotLS0gYS9tb2R1bGVzLmQv OThpbnRlZ3JpdHkvaW1hLWtleXMtbG9hZC5zaAorKysgYi9tb2R1bGVzLmQvOThpbnRlZ3JpdHkv aW1hLWtleXMtbG9hZC5zaApAQCAtMiw3ICsyLDEwIEBACiAKIFNFQ1VSSVRZRlNESVI9Ii9zeXMv a2VybmVsL3NlY3VyaXR5IgogSU1BU0VDRElSPSIke1NFQ1VSSVRZRlNESVJ9L2ltYSIKLUlNQUNP TkZJRz0iJHtORVdST09UfS9ldGMvc3lzY29uZmlnL2ltYSIKK0lNQUNPTkZJRz0iJHtORVdST09U fS9ldGMvaW1hL2ltYSIKKworIyBmb3IgYmFja3dhcmRzIGNvbXBhdGliaWxpdHkKK0lNQUNPTkZJ R19PTEQ9IiR7TkVXUk9PVH0vZXRjL3N5c2NvbmZpZy9pbWEiCiAKIGxvYWRfeDUwOV9rZXlzKCkK IHsKQEAgLTExLDYgKzE0LDggQEAgbG9hZF94NTA5X2tleXMoKQogICAgICMgb3ZlcnJpZGUgdGhl IGRlZmF1bHQgY29uZmlndXJhdGlvbgogICAgIGlmIFsgLWYgIiR7SU1BQ09ORklHfSIgXTsgdGhl bgogICAgICAgICAuICR7SU1BQ09ORklHfQorICAgIGVsaWYgWyAtZiAiJHtJTUFDT05GSUdfT0xE fSIgXTsgdGhlbgorICAgICAgICAuICR7SU1BQ09ORklHX09MRH0KICAgICBmaQogCiAgICAgaWYg WyAteiAiJHtJTUFLRVlESVJ9IiBdOyB0aGVuCmRpZmYgLS1naXQgYS9tb2R1bGVzLmQvOThpbnRl Z3JpdHkvaW1hLXBvbGljeS1sb2FkLnNoIGIvbW9kdWxlcy5kLzk4aW50ZWdyaXR5L2ltYS1wb2xp Y3ktbG9hZC5zaAppbmRleCA4NWNkM2I5Li5hOTJiMWJiIDEwMDc1NQotLS0gYS9tb2R1bGVzLmQv OThpbnRlZ3JpdHkvaW1hLXBvbGljeS1sb2FkLnNoCisrKyBiL21vZHVsZXMuZC85OGludGVncml0 eS9pbWEtcG9saWN5LWxvYWQuc2gKQEAgLTUsMTAgKzUsMTkgQEAKICMgQ29weXJpZ2h0IChDKSAy MDExIFBvbGl0ZWNuaWNvIGRpIFRvcmlubywgSXRhbHkKICMgICAgICAgICAgICAgICAgICAgIFRP UlNFQyBncm91cCAtLSBodHRwOi8vc2VjdXJpdHkucG9saXRvLml0CiAjIFJvYmVydG8gU2Fzc3Ug PHJvYmVydG8uc2Fzc3VAcG9saXRvLml0PgorIworIyBDb3B5cmlnaHQgKEMpIDIwMTYgSUJNIENv cnBvcmF0aW9uCisjCisjIFN0ZWZhbiBCZXJnZXIgPHN0ZWZhbmJAbGludXgudm5ldC5pYm0uY29t PgorIwogCiBJTUFTRUNESVI9IiR7U0VDVVJJVFlGU0RJUn0vaW1hIgotSU1BQ09ORklHPSIke05F V1JPT1R9L2V0Yy9zeXNjb25maWcvaW1hIgotSU1BUE9MSUNZPSIvZXRjL3N5c2NvbmZpZy9pbWEt cG9saWN5IgorSU1BQ09ORklHPSIke05FV1JPT1R9L2V0Yy9pbWEvaW1hIgorSU1BUE9MSUNZPSIv ZXRjL2ltYS9pbWEtcG9saWN5IgorCisjIGZvciBiYWNrd2FyZHMgY29tcGF0aWJpbGl0eQorSU1B Q09ORklHX09MRD0iJHtORVdST09UfS9ldGMvc3lzY29uZmlnL2ltYSIKK0lNQVBPTElDWV9PTEQ9 Ii9ldGMvc3lzY29uZmlnL2ltYS1wb2xpY3kiCiAKIGxvYWRfaW1hX3BvbGljeSgpCiB7CkBAIC0y MSwxMSArMzAsMTYgQEAgbG9hZF9pbWFfcG9saWN5KCkKICAgICBmaQogCiAgICAgIyBvdmVycmlk ZSB0aGUgZGVmYXVsdCBjb25maWd1cmF0aW9uCi0gICAgWyAtZiAiJHtJTUFDT05GSUd9IiBdICYm IFwKKyAgICBpZiBbIC1mICIke0lNQUNPTkZJR30iIF07IHRoZW4KICAgICAgICAgLiAke0lNQUNP TkZJR30KKyAgICBlbGlmIFsgLWYgIiR7SU1BQ09ORklHX09MRH0iIF07IHRoZW4KKyAgICAgICAg LiAke0lNQUNPTkZJR19PTER9CisgICAgZmkKIAogICAgICMgc2V0IHRoZSBJTUEgcG9saWN5IHBh dGggbmFtZQogICAgIElNQVBPTElDWVBBVEg9IiR7TkVXUk9PVH0ke0lNQVBPTElDWX0iCisgICAg WyAhIC1mICIke0lNQVBPTElDWVBBVEh9IiBdICYmIFwKKyAgICAgICAgSU1BUE9MSUNZUEFUSD0i JHtORVdST09UfSR7SU1BUE9MSUNZX09MRH0iCiAKICAgICAjIGNoZWNrIHRoZSBleGlzdGVuY2Ug b2YgdGhlIElNQSBwb2xpY3kgZmlsZQogICAgIFsgLWYgIiR7SU1BUE9MSUNZUEFUSH0iIF0gJiYg ewotLSAKMi44LjMKCl9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fCnN5c3RlbWQtZGV2ZWwgbWFpbGluZyBsaXN0CnN5c3RlbWQtZGV2ZWxAbGlzdHMuZnJlZWRl c2t0b3Aub3JnCmh0dHBzOi8vbGlzdHMuZnJlZWRlc2t0b3Aub3JnL21haWxtYW4vbGlzdGluZm8v c3lzdGVtZC1kZXZlbAo=