IMA: move the default policy file to /etc/ima directory

Signed-off-by: Lans Zhang <jia.zhang@windriver.com>
This commit is contained in:
Lans Zhang
2017-07-25 09:37:59 +08:00
parent 567e817691
commit 77640af54c
2 changed files with 10 additions and 8 deletions

View File

@@ -26,7 +26,7 @@ ROOT_DIR="${1}"
SECURITYFS_DIR="${ROOT_DIR}/sys/kernel/security"
# The policy files are always placed in initramfs
IMA_POLICY=/etc/ima_policy
IMA_POLICY=/etc/ima/ima_policy
SECURITYFS_MOUNTED=0

View File

@@ -1,18 +1,20 @@
DESCRIPTION = "The default external IMA policy"
LICENSE = "MIT"
LIC_FILES_CHKSUM = "file://${COREBASE}/LICENSE;md5=4d92cd373abda3937c2bc47fbc49d690 \
file://${COREBASE}/meta/COPYING.MIT;md5=3da9cfbcb788c80a0384361b4de20420"
LIC_FILES_CHKSUM = "\
file://${COREBASE}/LICENSE;md5=4d92cd373abda3937c2bc47fbc49d690 \
file://${COREBASE}/meta/COPYING.MIT;md5=3da9cfbcb788c80a0384361b4de20420 \
"
SRC_URI = " \
file://ima_policy.default \
"
SRC_URI = "\
file://ima_policy.default \
"
S = "${WORKDIR}"
do_install() {
install -d "${D}${sysconfdir}"
install -d "${D}${sysconfdir}/ima"
install -m 0400 "${WORKDIR}/ima_policy.default" \
"${D}${sysconfdir}"
"${D}${sysconfdir}/ima"
}
FILES_${PN} = "${sysconfdir}"