[systemd-devel] [PATCH v2] 98integrity: Use /etc/ima as dir for IMA policy and config file

Stefan Berger stefanb at linux.vnet.ibm.com
Wed Nov 30 16:03:48 UTC 2016


On 11/30/2016 10:52 AM, Harald Hoyer wrote:
> On 30.11.2016 16:24, Stefan Berger wrote:
>> On 11/30/2016 10:16 AM, Harald Hoyer wrote:
>>> On 30.11.2016 16:10, Stefan Berger wrote:
>>>> From: Stefan Berger <stefanb at us.ibm.com>
>>>>
>>>> To sync with systemd, use the filepath /etc/ima/ima-policy as
>>>> the file location for the IMA policy. At the same time we
>>>> move the ima config file location to /etc/ima/ima. Adapt the
>>>> documentation to the new path.
>>>>
>>>> Signed-off-by: Stefan Berger <stefanb at linux.vnet.ibm.com>
>>> One more thing: Do you want to be backwards compatible and also read the old files, if they exist?
>> I had thought about that and can certainly add it.  Neither Fedora, RHEL, nor SUSE are packaging these files so far. So likely
>> there aren't many users out there. Considering that, what would you suggest?
>>
> Hmm, I'll add it to the dracut NEWS file

Let me send a v3 of the patch with backwards compatibility. I'll have it 
look for the new location first, then fall back to the old files.




More information about the systemd-devel mailing list