On Mon, 28.11.16 14:17, Stefan Berger ([email protected]) wrote:

> From: Stefan Berger <[email protected]>
> 
> IMA validates file signatures based on the security.ima xattr. As of
> Linux-4.7, instead of copying the IMA policy into the securityfs policy,
> the IMA policy pathname can be written, allowing the IMA policy file
> signature to be validated.
> 
> This patch modifies the existing code to first attempt to write the
> pathname, but on failure falls back to copying the IMA policy
> contents.

This second patch looks good. Any chance you can submit it as a PR on
github? That's how we usually expect patches these days!

Thanks!

Lennart

-- 
Lennart Poettering, Red Hat
_______________________________________________
systemd-devel mailing list
[email protected]
https://lists.freedesktop.org/mailman/listinfo/systemd-devel

Reply via email to