mirrors/meta-security
1
0
Fork 0
mirror of https://git.yoctoproject.org/meta-security synced 2026-04-20 23:40:05 +00:00
Code Issues Projects Releases Wiki Activity

ima: Fix the ima_policy_appraise_all to appraise executables & libraries

Browse Source 
Fix the ima_policy_appraise_all policy to appraise all executables
and libraries. Also update the list of files that are not appraised to not
appraise cgroup related files.

Signed-off-by: Stefan Berger <stefanb@linux.ibm.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
This commit is contained in:
Stefan Berger
2023-04-28 08:23:10 -04:00
committed by Armin Kuster
parent 0652c9fd74
commit cb8f26d82a
1 changed files with 8 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

9
meta-integrity/recipes-security/ima_policy_appraise_all/files/ima_policy_appraise_all
View File

@@ -25,5 +25,12 @@ dont_appraise fsmagic=0xf97cff8c
dont_appraise fsmagic=0x6e736673 dont_appraise fsmagic=0x6e736673
# EFIVARFS_MAGIC # EFIVARFS_MAGIC
dont_appraise fsmagic=0xde5e81e4 dont_appraise fsmagic=0xde5e81e4
# Cgroup
dont_appraise fsmagic=0x27e0eb
# Cgroup2
dont_appraise fsmagic=0x63677270
appraise # Appraise libraries
appraise func=MMAP_CHECK mask=MAY_EXEC
# Appraise executables
appraise func=BPRM_CHECK