On Tue, 2015-12-08 at 21:17 +0200, Petko Manolov wrote: > On 15-12-08 13:01:18, Mimi Zohar wrote: > > While creating a temporary list of new rules, the ima_appraise flag is > > updated, but not reverted on failure to append the new rules to the > > existing policy. This patch defines temp_ima_appraise flag. Only when > > the new rules are appended to the policy is the flag updated. > > > > Signed-off-by: Mimi Zohar <zo...@linux.vnet.ibm.com> > > FWIW - ACK.
Thanks! Could you also take a look at "[PATCH v1 7/7] ima: require signed IMA policy" as well? Mimi -- To unsubscribe from this list: send the line "unsubscribe linux-security-module" in the body of a message to majord...@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html
