Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 08de59eb authored by Mimi Zohar's avatar Mimi Zohar
Browse files

Revert "ima: policy for RAMFS" 



This reverts commit 4c2c3927.

Everything in the initramfs should be measured and appraised,
but until the initramfs has extended attribute support, at
least measured.

Signed-off-by: default avatarMimi Zohar <zohar@us.ibm.com>
Cc: Stable Kernel <stable@kernel.org>
parent 089bc8e9

security/integrity/ima/ima_policy.c

+0 −1
Original line number Diff line number Diff line
@@ -73,7 +73,6 @@ static struct ima_rule_entry default_rules[] = { 
	{.action = DONT_MEASURE,.fsmagic = SYSFS_MAGIC,.flags = IMA_FSMAGIC},

	{.action = DONT_MEASURE,.fsmagic = DEBUGFS_MAGIC,.flags = IMA_FSMAGIC},

	{.action = DONT_MEASURE,.fsmagic = TMPFS_MAGIC,.flags = IMA_FSMAGIC},

	{.action = DONT_MEASURE,.fsmagic = RAMFS_MAGIC,.flags = IMA_FSMAGIC},

	{.action = DONT_MEASURE,.fsmagic = DEVPTS_SUPER_MAGIC,.flags = IMA_FSMAGIC},

	{.action = DONT_MEASURE,.fsmagic = BINFMTFS_MAGIC,.flags = IMA_FSMAGIC},

	{.action = DONT_MEASURE,.fsmagic = SECURITYFS_MAGIC,.flags = IMA_FSMAGIC},