]> bbs.cooldavid.org Git - net-next-2.6.git/commit - security/integrity/ima/ima_fs.c
git://bbs.cooldavid.org / net-next-2.6.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: b103387) | patch
IMA: remove read permissions on the ima policy file
authorEric Paris <eparis@redhat.com>
Tue, 12 May 2009 19:13:55 +0000 (15:13 -0400)
committerJames Morris <jmorris@namei.org>
Thu, 14 May 2009 23:55:41 +0000 (09:55 +1000)
commitf850a7c040d9faafb41bceb0a05d6bb7432c8c7a
treee4e1fa97be0bd3e749f993b99d18746c8a9737batree | snapshot (tar.bz2 tar.gz zip)
parentb103387037cea2ba0f04b44d408d54c53f678061commit | diff
IMA: remove read permissions on the ima policy file

The IMA policy file does not implement read.  Trying to just open/read/close
the file will load a blank policy and you cannot then change the policy
without a reboot.  This removes the read permission from the file so one must
at least be attempting to write...

Signed-off-by: Eric Paris <eparis@redhat.com>
Acked-by: Mimi Zohar <zohar@us.ibm.com>
Signed-off-by: James Morris <jmorris@namei.org>
security/integrity/ima/ima_fs.c diff | blob | blame | history
Clone of davem's net-next-2.6 tree