Re: [Rpm-maint] [PATCH v2 1/4] ima-plugin: Have executable configuration files signed

2016-09-23 Thread Thierry Vignaud
On 23 September 2016 at 08:44, Panu Matilainen wrote: > Also generally it's preferred to avoid magic numbers when it can be easily > expressed with defined names, (S_IXUSR|S_IXGRP|S_IXOTH) is easier for the > reader than 0111. That actually depends on the reader :-) __

Re: [Rpm-maint] [PATCH v2 1/4] ima-plugin: Have executable configuration files signed

2016-09-23 Thread Stefan Berger
Panu Matilainen wrote on 09/23/2016 02:44:48 AM: > From: Panu Matilainen > To: Stefan Berger , rpm-maint@lists.rpm.org > Cc: Stefan Berger/Watson/IBM@IBMUS, fionnuala.gun...@gmail.com > Date: 09/23/2016 02:45 AM > Subject: Re: [Rpm-maint] [PATCH v2 1/4] ima-plugin:

Re: [Rpm-maint] [PATCH v2 1/4] ima-plugin: Have executable configuration files signed

2016-09-22 Thread Panu Matilainen
On 09/22/2016 08:30 PM, Stefan Berger wrote: Some configuration files are executables and so they require the signature in the extended attribute. If they are not executable, they can be skipped. Examples for configuration files that are also executables are the grub files in /etc/grub.d. Signe

[Rpm-maint] [PATCH v2 1/4] ima-plugin: Have executable configuration files signed

2016-09-22 Thread Stefan Berger
Some configuration files are executables and so they require the signature in the extended attribute. If they are not executable, they can be skipped. Examples for configuration files that are also executables are the grub files in /etc/grub.d. Signed-off-by: Stefan Berger --- plugins/ima.c | 2