On Wed, 2013-02-13 at 09:38 -0500, Vivek Goyal wrote: > On Wed, Feb 13, 2013 at 03:36:45PM +0200, Kasatkin, Dmitry wrote: > > It should not be the only line in the policy. > > Can you share full policy? > > I verified by putting some printk.
If anyone is interested in posting a patch to display the current policy, it shouldn't be too difficult to do. > There is only single rule in > ima_policy_rules list after I have updated the rules through "policy" > file. > echo "appraise fowner=0 func=BPRM_CHECK appraise_type=imasig_optional" > > /sys/kernel/security/policy Right, this replaces one policy with another one. thanks, Mimi -- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majord...@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/