Matthew Riley:
> The IMA policy includes this line, which is probably of interest here:
> audit func=FILE_MMAP mask=MAY_EXEC
I see.
But isn't it func=MMAP_CHECK?
Anyway, I hope you won't mind dropping security_mmap_file() call in
aufs_mmap() for the branch-fs file.
security_mmap_file() for the a
I didn't configure the machine in question, but it looks like IMA is
enabled post-boot through an init.d script.
The IMA policy includes this line, which is probably of interest here:
audit func=FILE_MMAP mask=MAY_EXEC
On Fri, May 2, 2014 at 12:45 PM, wrote:
>
> Matthew Riley:
>> I'm using Ubun
