On Tue, Feb 21, 2012 at 18:32, Roberto Sassu <roberto.sassu@xxxxxxxxx> wrote: > I meant we can create a new package called for example 'ima-utils' > that can be used by Systemd to determine, at compile time, whether > the IMA support for loading custom policies should be enabled or not. That's not needed. There is no problem enabling ima support conditionally in ./configure. Build systems are unlikely to install ima in the buildroot anyway, when there is no library or anything to link against, so auto-detection is not really useful. A default to off and requiring an explicit enable sounds sufficient here. Kay -- To unsubscribe from this list: send the line "unsubscribe initramfs" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html