projects / linux.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 46cdc6d) | patch
ima: don't remove the securityfs policy file
authorMimi Zohar <zohar@linux.vnet.ibm.com>
Tue, 27 Jun 2017 20:10:39 +0000 (16:10 -0400)
committerMimi Zohar <zohar@linux.vnet.ibm.com>
Wed, 8 Nov 2017 20:16:36 +0000 (15:16 -0500)
commit2068626d1345f23fd2b926d834d4f74b37cd7134
treeef05b137a8c28a25f7b262214ff60a3d418e43eatree | snapshot
parent46cdc6d533c925c7477feea7caa404466bac7ac8commit | diff
ima: don't remove the securityfs policy file

The securityfs policy file is removed unless additional rules can be
appended to the IMA policy (CONFIG_IMA_WRITE_POLICY), regardless as
to whether the policy is configured so that it can be displayed.

This patch changes this behavior, removing the securityfs policy file,
only if CONFIG_IMA_READ_POLICY is also not enabled.

Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>
security/integrity/ima/ima_fs.c diff | blob | history
ep93xx device tree rework repo: git://git.maquefel.me/linux.git