IMA: allow to write policy but deny to read policy

Signed-off-by: Lans Zhang <jia.zhang@windriver.com>
This commit is contained in:
Lans Zhang
2017-07-20 16:14:15 +08:00
parent 4d98ee98d2
commit c84c5efb45
@@ -1,7 +1,7 @@
CONFIG_IMA=y
# CONFIG_IMA_KEXEC is not set
# CONFIG_IMA_LSM_RULES is not set
# CONFIG_IMA_WRITE_POLICY is not set
CONFIG_IMA_WRITE_POLICY=y
# CONFIG_IMA_READ_POLICY is not set
CONFIG_IMA_MEASURE_PCR_IDX=10
# CONFIG_IMA_TEMPLATE is not set