mirror of
https://git.yoctoproject.org/meta-security
synced 2026-05-07 04:58:47 +00:00
ima_policy_simple: add another sample policy
Signed-off-by: Armin Kuster <akuster808@gmail.com>
This commit is contained in:
@@ -0,0 +1,4 @@
|
|||||||
|
# Very simple policy demonstrating the systemd policy loading bug
|
||||||
|
# (policy with one line works, two lines don't).
|
||||||
|
dont_appraise fsmagic=0x9fa0
|
||||||
|
dont_appraise fsmagic=0x62656572
|
||||||
@@ -0,0 +1,18 @@
|
|||||||
|
SUMMARY = "IMA sample simple policy"
|
||||||
|
LICENSE = "MIT"
|
||||||
|
LIC_FILES_CHKSUM = "file://${COREBASE}/meta/COPYING.MIT;md5=3da9cfbcb788c80a0384361b4de20420"
|
||||||
|
|
||||||
|
# This policy file will get installed as /etc/ima/ima-policy.
|
||||||
|
# It is located via the normal file search path, so a .bbappend
|
||||||
|
# to this recipe can just point towards one of its own files.
|
||||||
|
IMA_POLICY ?= "ima_policy_simple"
|
||||||
|
|
||||||
|
SRC_URI = " file://${IMA_POLICY}"
|
||||||
|
|
||||||
|
do_install () {
|
||||||
|
install -d ${D}/${sysconfdir}/ima
|
||||||
|
install ${WORKDIR}/${IMA_POLICY} ${D}/${sysconfdir}/ima/ima-policy
|
||||||
|
}
|
||||||
|
|
||||||
|
FILES_${PN} = "${sysconfdir}/ima"
|
||||||
|
RDEPENDS_${PN} = "ima-evm-utils"
|
||||||
Reference in New Issue
Block a user