[PATCH] 98integrity: Use /etc/ima/ima-policy as file location for IMA policy

[PATCH] 98integrity: Use /etc/ima/ima-policy as file location for IMA policy

[Stefan Berger]

From: Stefan Berger <stefanb-r/Jw6+rmf7HQT0dZR+AlfA@public.gmane.org>

To sync with systemd, use the filepath /etc/ima/ima-policy as
the file location for the IMA policy.

Signed-off-by: Stefan Berger <stefanb-23VcF4HTsmIX0ybBhKVfKdBPR1lH4CV8@public.gmane.org>
---
 modules.d/98integrity/ima-policy-load.sh | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)

diff --git a/modules.d/98integrity/ima-policy-load.sh b/modules.d/98integrity/ima-policy-load.sh
index 85cd3b9..35cfbcc 100755
--- a/modules.d/98integrity/ima-policy-load.sh
+++ b/modules.d/98integrity/ima-policy-load.sh
@@ -5,10 +5,15 @@
 # Copyright (C) 2011 Politecnico di Torino, Italy
 #                    TORSEC group -- http://security.polito.it
 # Roberto Sassu <roberto.sassu-8RLafaVCWuNeoWH0uzbU5w@public.gmane.org>
+#
+# Copyright (C) 2016 IBM Corporation
+#
+# Stefan Berger <stefanb-23VcF4HTsmIX0ybBhKVfKdBPR1lH4CV8@public.gmane.org>
+#
 
 IMASECDIR="${SECURITYFSDIR}/ima"
 IMACONFIG="${NEWROOT}/etc/sysconfig/ima"
-IMAPOLICY="/etc/sysconfig/ima-policy"
+IMAPOLICY="/etc/ima/ima-policy"
 
 load_ima_policy()
 {
-- 
2.8.3

Re: [PATCH] 98integrity: Use /etc/ima/ima-policy as file location for IMA policy

[Harald Hoyer]

On 30.11.2016 15:05, Stefan Berger wrote:
> From: Stefan Berger <stefanb-r/Jw6+rmf7HQT0dZR+AlfA@public.gmane.org>
> 
> To sync with systemd, use the filepath /etc/ima/ima-policy as
> the file location for the IMA policy.
> 
> Signed-off-by: Stefan Berger <stefanb-23VcF4HTsmIX0ybBhKVfKdBPR1lH4CV8@public.gmane.org>
> ---
>  modules.d/98integrity/ima-policy-load.sh | 7 ++++++-
>  1 file changed, 6 insertions(+), 1 deletion(-)
> 
> diff --git a/modules.d/98integrity/ima-policy-load.sh b/modules.d/98integrity/ima-policy-load.sh
> index 85cd3b9..35cfbcc 100755
> --- a/modules.d/98integrity/ima-policy-load.sh
> +++ b/modules.d/98integrity/ima-policy-load.sh
> @@ -5,10 +5,15 @@
>  # Copyright (C) 2011 Politecnico di Torino, Italy
>  #                    TORSEC group -- http://security.polito.it
>  # Roberto Sassu <roberto.sassu-8RLafaVCWuNeoWH0uzbU5w@public.gmane.org>
> +#
> +# Copyright (C) 2016 IBM Corporation
> +#
> +# Stefan Berger <stefanb-23VcF4HTsmIX0ybBhKVfKdBPR1lH4CV8@public.gmane.org>
> +#
>  
>  IMASECDIR="${SECURITYFSDIR}/ima"
>  IMACONFIG="${NEWROOT}/etc/sysconfig/ima"
> -IMAPOLICY="/etc/sysconfig/ima-policy"
> +IMAPOLICY="/etc/ima/ima-policy"
>  
>  load_ima_policy()
>  {
> 

you might want to change $IMACONFIG also then?

Re: [PATCH] 98integrity: Use /etc/ima/ima-policy as file location for IMA policy

[Dracut GitHub Import Bot]

Patchset imported to github.
Pull request:
<https://github.com/dracutdevs/dracut/compare/master...dracut-mailing-devs:1480514741-30910-1-git-send-email-stefanb%40linux.vnet.ibm.com>