* [PATCH] 98integrity: Use /etc/ima/ima-policy as file location for IMA policy
@ 2016-11-30 14:05 Stefan Berger
[not found] ` <1480514741-30910-1-git-send-email-stefanb-23VcF4HTsmIX0ybBhKVfKdBPR1lH4CV8@public.gmane.org>
0 siblings, 1 reply; 3+ messages in thread
From: Stefan Berger @ 2016-11-30 14:05 UTC (permalink / raw)
To: initramfs-u79uwXL29TY76Z2rM5mHXA, harald-H+wXaHxf7aLQT0dZR+AlfA
Cc: zohar-23VcF4HTsmIX0ybBhKVfKdBPR1lH4CV8,
systemd-devel-PD4FTy7X32lNgt0PjOBp9y5qC8QIuHrW,
linux-ima-user-5NWGOfrQmneRv+LV9MX5uipxlwaOVQ5f, Stefan Berger,
Stefan Berger
From: Stefan Berger <stefanb-r/Jw6+rmf7HQT0dZR+AlfA@public.gmane.org>
To sync with systemd, use the filepath /etc/ima/ima-policy as
the file location for the IMA policy.
Signed-off-by: Stefan Berger <stefanb-23VcF4HTsmIX0ybBhKVfKdBPR1lH4CV8@public.gmane.org>
---
modules.d/98integrity/ima-policy-load.sh | 7 ++++++-
1 file changed, 6 insertions(+), 1 deletion(-)
diff --git a/modules.d/98integrity/ima-policy-load.sh b/modules.d/98integrity/ima-policy-load.sh
index 85cd3b9..35cfbcc 100755
--- a/modules.d/98integrity/ima-policy-load.sh
+++ b/modules.d/98integrity/ima-policy-load.sh
@@ -5,10 +5,15 @@
# Copyright (C) 2011 Politecnico di Torino, Italy
# TORSEC group -- http://security.polito.it
# Roberto Sassu <roberto.sassu-8RLafaVCWuNeoWH0uzbU5w@public.gmane.org>
+#
+# Copyright (C) 2016 IBM Corporation
+#
+# Stefan Berger <stefanb-23VcF4HTsmIX0ybBhKVfKdBPR1lH4CV8@public.gmane.org>
+#
IMASECDIR="${SECURITYFSDIR}/ima"
IMACONFIG="${NEWROOT}/etc/sysconfig/ima"
-IMAPOLICY="/etc/sysconfig/ima-policy"
+IMAPOLICY="/etc/ima/ima-policy"
load_ima_policy()
{
--
2.8.3
^ permalink raw reply related [flat|nested] 3+ messages in thread
* Re: [PATCH] 98integrity: Use /etc/ima/ima-policy as file location for IMA policy
[not found] ` <1480514741-30910-1-git-send-email-stefanb-23VcF4HTsmIX0ybBhKVfKdBPR1lH4CV8@public.gmane.org>
@ 2016-11-30 14:35 ` Harald Hoyer
2016-11-30 15:04 ` Dracut GitHub Import Bot
1 sibling, 0 replies; 3+ messages in thread
From: Harald Hoyer @ 2016-11-30 14:35 UTC (permalink / raw)
To: Stefan Berger, initramfs-u79uwXL29TY76Z2rM5mHXA
Cc: zohar-23VcF4HTsmIX0ybBhKVfKdBPR1lH4CV8,
systemd-devel-PD4FTy7X32lNgt0PjOBp9y5qC8QIuHrW,
linux-ima-user-5NWGOfrQmneRv+LV9MX5uipxlwaOVQ5f, Stefan Berger
On 30.11.2016 15:05, Stefan Berger wrote:
> From: Stefan Berger <stefanb-r/Jw6+rmf7HQT0dZR+AlfA@public.gmane.org>
>
> To sync with systemd, use the filepath /etc/ima/ima-policy as
> the file location for the IMA policy.
>
> Signed-off-by: Stefan Berger <stefanb-23VcF4HTsmIX0ybBhKVfKdBPR1lH4CV8@public.gmane.org>
> ---
> modules.d/98integrity/ima-policy-load.sh | 7 ++++++-
> 1 file changed, 6 insertions(+), 1 deletion(-)
>
> diff --git a/modules.d/98integrity/ima-policy-load.sh b/modules.d/98integrity/ima-policy-load.sh
> index 85cd3b9..35cfbcc 100755
> --- a/modules.d/98integrity/ima-policy-load.sh
> +++ b/modules.d/98integrity/ima-policy-load.sh
> @@ -5,10 +5,15 @@
> # Copyright (C) 2011 Politecnico di Torino, Italy
> # TORSEC group -- http://security.polito.it
> # Roberto Sassu <roberto.sassu-8RLafaVCWuNeoWH0uzbU5w@public.gmane.org>
> +#
> +# Copyright (C) 2016 IBM Corporation
> +#
> +# Stefan Berger <stefanb-23VcF4HTsmIX0ybBhKVfKdBPR1lH4CV8@public.gmane.org>
> +#
>
> IMASECDIR="${SECURITYFSDIR}/ima"
> IMACONFIG="${NEWROOT}/etc/sysconfig/ima"
> -IMAPOLICY="/etc/sysconfig/ima-policy"
> +IMAPOLICY="/etc/ima/ima-policy"
>
> load_ima_policy()
> {
>
you might want to change $IMACONFIG also then?
^ permalink raw reply [flat|nested] 3+ messages in thread
* Re: [PATCH] 98integrity: Use /etc/ima/ima-policy as file location for IMA policy
[not found] ` <1480514741-30910-1-git-send-email-stefanb-23VcF4HTsmIX0ybBhKVfKdBPR1lH4CV8@public.gmane.org>
2016-11-30 14:35 ` Harald Hoyer
@ 2016-11-30 15:04 ` Dracut GitHub Import Bot
1 sibling, 0 replies; 3+ messages in thread
From: Dracut GitHub Import Bot @ 2016-11-30 15:04 UTC (permalink / raw)
To: initramfs-u79uwXL29TY76Z2rM5mHXA
Patchset imported to github.
Pull request:
<https://github.com/dracutdevs/dracut/compare/master...dracut-mailing-devs:1480514741-30910-1-git-send-email-stefanb%40linux.vnet.ibm.com>
^ permalink raw reply [flat|nested] 3+ messages in thread
end of thread, other threads:[~2016-11-30 15:04 UTC | newest]
Thread overview: 3+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2016-11-30 14:05 [PATCH] 98integrity: Use /etc/ima/ima-policy as file location for IMA policy Stefan Berger
[not found] ` <1480514741-30910-1-git-send-email-stefanb-23VcF4HTsmIX0ybBhKVfKdBPR1lH4CV8@public.gmane.org>
2016-11-30 14:35 ` Harald Hoyer
2016-11-30 15:04 ` Dracut GitHub Import Bot
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox