On 30.11.2016 15:05, Stefan Berger wrote: > From: Stefan Berger <stefanb@xxxxxxxxxx> > > To sync with systemd, use the filepath /etc/ima/ima-policy as > the file location for the IMA policy. > > Signed-off-by: Stefan Berger <stefanb@xxxxxxxxxxxxxxxxxx> > --- > modules.d/98integrity/ima-policy-load.sh | 7 ++++++- > 1 file changed, 6 insertions(+), 1 deletion(-) > > diff --git a/modules.d/98integrity/ima-policy-load.sh b/modules.d/98integrity/ima-policy-load.sh > index 85cd3b9..35cfbcc 100755 > --- a/modules.d/98integrity/ima-policy-load.sh > +++ b/modules.d/98integrity/ima-policy-load.sh > @@ -5,10 +5,15 @@ > # Copyright (C) 2011 Politecnico di Torino, Italy > # TORSEC group -- http://security.polito.it > # Roberto Sassu <roberto.sassu@xxxxxxxxx> > +# > +# Copyright (C) 2016 IBM Corporation > +# > +# Stefan Berger <stefanb@xxxxxxxxxxxxxxxxxx> > +# > > IMASECDIR="${SECURITYFSDIR}/ima" > IMACONFIG="${NEWROOT}/etc/sysconfig/ima" > -IMAPOLICY="/etc/sysconfig/ima-policy" > +IMAPOLICY="/etc/ima/ima-policy" > > load_ima_policy() > { > you might want to change $IMACONFIG also then? -- To unsubscribe from this list: send the line "unsubscribe initramfs" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
