You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
40 lines
1.0 KiB
40 lines
1.0 KiB
#!/bin/sh |
|
|
|
# Licensed under the GPLv2 |
|
# |
|
# Copyright (C) 2011 Politecnico di Torino, Italy |
|
# TORSEC group -- http://security.polito.it |
|
# Roberto Sassu <roberto.sassu@polito.it> |
|
|
|
IMASECDIR="${SECURITYFSDIR}/ima" |
|
IMACONFIG="${NEWROOT}/etc/sysconfig/ima" |
|
IMAPOLICY="/etc/sysconfig/ima-policy" |
|
|
|
load_ima_policy() { |
|
# check kernel support for IMA |
|
if [ ! -e "${IMASECDIR}" ]; then |
|
if [ "${RD_DEBUG}" = "yes" ]; then |
|
info "integrity: IMA kernel support is disabled" |
|
fi |
|
return 0 |
|
fi |
|
|
|
# override the default configuration |
|
# shellcheck disable=SC1090 |
|
[ -f "${IMACONFIG}" ] \ |
|
&& . "${IMACONFIG}" |
|
|
|
# set the IMA policy path name |
|
IMAPOLICYPATH="${NEWROOT}${IMAPOLICY}" |
|
|
|
# check the existence of the IMA policy file |
|
[ -f "${IMAPOLICYPATH}" ] && { |
|
info "Loading the provided IMA custom policy" |
|
printf '%s' "${IMAPOLICYPATH}" > "${IMASECDIR}"/policy \ |
|
|| cat "${IMAPOLICYPATH}" > "${IMASECDIR}"/policy |
|
} |
|
|
|
return 0 |
|
} |
|
|
|
load_ima_policy
|
|
|