[systemd-devel] [Linux-ima-user] [PATCH 2/2] main: added support for loading IMA custom policies

Kay Sievers kay.sievers at vrfy.org
Tue Feb 21 09:56:19 PST 2012


On Tue, Feb 21, 2012 at 18:32, Roberto Sassu <roberto.sassu at polito.it> wrote:

>  I meant we can create a new package called for example 'ima-utils'
> that can be used by Systemd to determine, at compile time, whether
> the IMA support for loading custom policies should be enabled or not.

That's not needed. There is no problem enabling ima support
conditionally in ./configure.

Build systems are unlikely to install ima in the buildroot anyway,
when there is no library or anything to link against, so
auto-detection is not really useful.

A default to off and requiring an explicit enable sounds sufficient here.

Kay


More information about the systemd-devel mailing list