Gecko [ www.agenciac4designer.com ]

Name	Size	Permission
README	2.93 KB	-rw-r--r--
evm-enable.sh	4.7 KB	-rwxr-xr-x
ima-keys-load.sh	1.46 KB	-rwxr-xr-x
ima-policy-load.sh	1.03 KB	-rwxr-xr-x
module-setup.sh	371 B	-rwxr-xr-x

Code Editor : ima-policy-load.sh

#!/usr/bin/sh

# Licensed under the GPLv2
#
# Copyright (C) 2011 Politecnico di Torino, Italy
#                    TORSEC group -- http://security.polito.it
# Roberto Sassu <roberto.sassu@polito.it>

IMASECDIR="${SECURITYFSDIR}/ima"
IMACONFIG="${NEWROOT}/etc/sysconfig/ima"
IMAPOLICY="/etc/sysconfig/ima-policy"

load_ima_policy() {
    # check kernel support for IMA
    if [ ! -e "${IMASECDIR}" ]; then
        if [ "${RD_DEBUG}" = "yes" ]; then
            info "integrity: IMA kernel support is disabled"
        fi
        return 0
    fi

# override the default configuration
    # shellcheck disable=SC1090
    [ -f "${IMACONFIG}" ] \
        && . "${IMACONFIG}"

# set the IMA policy path name
    IMAPOLICYPATH="${NEWROOT}${IMAPOLICY}"

# check the existence of the IMA policy file
    [ -f "${IMAPOLICYPATH}" ] && {
        info "Loading the provided IMA custom policy"
        printf '%s' "${IMAPOLICYPATH}" > "${IMASECDIR}"/policy \
            || cat "${IMAPOLICYPATH}" > "${IMASECDIR}"/policy
    }

return 0
}

load_ima_policy

${this.title}

Code Editor : ima-policy-load.sh