Messages in this thread | | | Subject | Re: [PATCH 2/2] ima: Support appraise_type=imasig_optional | From | Mimi Zohar <> | Date | Wed, 13 Feb 2013 10:51:15 -0500 |
| |
On Wed, 2013-02-13 at 09:38 -0500, Vivek Goyal wrote: > On Wed, Feb 13, 2013 at 03:36:45PM +0200, Kasatkin, Dmitry wrote: > > It should not be the only line in the policy. > > Can you share full policy? > > I verified by putting some printk.
If anyone is interested in posting a patch to display the current policy, it shouldn't be too difficult to do.
> There is only single rule in > ima_policy_rules list after I have updated the rules through "policy" > file.
> echo "appraise fowner=0 func=BPRM_CHECK appraise_type=imasig_optional" > > /sys/kernel/security/policy
Right, this replaces one policy with another one.
thanks,
Mimi
| |