Re: [PATCH 17/20] ima: make IMA policy replaceable at runtime

2014-05-14 Thread Dmitry Kasatkin
On 15 May 2014 02:45, Mimi Zohar wrote: > On Wed, 2014-04-23 at 16:30 +0300, Dmitry Kasatkin wrote: >> This patch provides functionality to replace the IMA policy at runtime. >> >> By default, the IMA policy can be successfully updated only once, >> but with this patch when the kernel configuratio

Re: [PATCH 17/20] ima: make IMA policy replaceable at runtime

2014-05-14 Thread Mimi Zohar
On Wed, 2014-04-23 at 16:30 +0300, Dmitry Kasatkin wrote: > This patch provides functionality to replace the IMA policy at runtime. > > By default, the IMA policy can be successfully updated only once, > but with this patch when the kernel configuration option > CONFIG_IMA_POLICY_REPLACEABLE is e