From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1757346Ab3BMNtK (ORCPT ); Wed, 13 Feb 2013 08:49:10 -0500 Received: from mx1.redhat.com ([209.132.183.28]:50454 "EHLO mx1.redhat.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S932899Ab3BMNtG (ORCPT ); Wed, 13 Feb 2013 08:49:06 -0500 Date: Wed, 13 Feb 2013 08:49:03 -0500 From: Vivek Goyal To: "Kasatkin, Dmitry" Cc: Mimi Zohar , linux-security-module@vger.kernel.org, linux-kernel@vger.kernel.org Subject: Re: [PATCH 2/2] ima: Support appraise_type=imasig_optional Message-ID: <20130213134903.GB3540@redhat.com> References: <1360613493-11969-1-git-send-email-vgoyal@redhat.com> <1360613493-11969-3-git-send-email-vgoyal@redhat.com> <1360620614.3524.223.camel@falcor1.watson.ibm.com> <20130212142636.GA23410@redhat.com> <1360689247.3524.275.camel@falcor1.watson.ibm.com> <20130212185203.GA29958@redhat.com> <20130212185725.GC23410@redhat.com> <20130213132920.GA3540@redhat.com> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: User-Agent: Mutt/1.5.21 (2010-09-15) Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org On Wed, Feb 13, 2013 at 03:36:45PM +0200, Kasatkin, Dmitry wrote: > It should not be the only line in the policy. So a single rule is not allowed or kernel has imposed more rules internally. > Can you share full policy? How do I get to full policy. Is there an interface I can read it from? Thanks Vivek