You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
42 lines
1.0 KiB
42 lines
1.0 KiB
14 years ago
|
#!/bin/sh
|
||
|
|
# -*- mode: shell-script; indent-tabs-mode: nil; sh-basic-offset: 4; -*-
|
||
|
|
# ex: ts=8 sw=4 sts=4 et filetype=sh
|
||
|
|
|
||
|
|
# Licensed under the GPLv2
|
||
|
|
#
|
||
|
|
# Copyright (C) 2011 Politecnico di Torino, Italy
|
||
|
|
# TORSEC group -- http://security.polito.it
|
||
|
|
# Roberto Sassu <roberto.sassu@polito.it>
|
||
|
|
|
||
|
|
IMASECDIR="${SECURITYFSDIR}/ima"
|
||
|
|
IMACONFIG="${NEWROOT}/etc/sysconfig/ima"
|
||
|
|
IMAPOLICY="/etc/sysconfig/ima-policy"
|
||
|
|
|
||
|
|
load_ima_policy()
|
||
|
|
{
|
||
|
|
# check kernel support for IMA
|
||
|
|
if [ ! -e "${IMASECDIR}" ]; then
|
||
|
|
if [ "${RD_DEBUG}" = "yes" ]; then
|
||
|
|
info "integrity: IMA kernel support is disabled"
|
||
|
|
fi
|
||
|
|
return 0
|
||
|
|
fi
|
||
|
|
|
||
|
|
# override the default configuration
|
||
|
|
[ -f "${IMACONFIG}" ] && \
|
||
|
|
. ${IMACONFIG}
|
||
|
|
|
||
|
|
# set the IMA policy path name
|
||
|
|
IMAPOLICYPATH="${NEWROOT}${IMAPOLICY}"
|
||
|
|
|
||
|
|
# check the existence of the IMA policy file
|
||
|
|
[ -f "${IMAPOLICYPATH}" ] && {
|
||
|
|
info "Loading the provided IMA custom policy";
|
||
|
|
cat ${IMAPOLICYPATH} > ${IMASECDIR}/policy;
|
||
|
|
}
|
||
|
|
|
||
|
|
return 0
|
||
|
|
}
|
||
|
|
|
||
|
|
load_ima_policy
|