forked from Minki/linux
c3d20103d0
The IMA default policy measures every single file opened by root. This is terrible for most users. Consider a system (like mine) with virtual machine images. When those images are touched (which happens at boot for me) those images are measured. This is just way too much for the default case. Signed-off-by: Eric Paris <eparis@redhat.com> Acked-by: Mimi Zohar <zohar@us.ibm.com> Signed-off-by: James Morris <jmorris@namei.org> |
||
---|---|---|
.. | ||
ima_api.c | ||
ima_audit.c | ||
ima_crypto.c | ||
ima_fs.c | ||
ima_iint.c | ||
ima_init.c | ||
ima_main.c | ||
ima_policy.c | ||
ima_queue.c | ||
ima.h | ||
Kconfig | ||
Makefile |