|
From: Kay S. <kay...@vr...> - 2012-02-21 17:56:50
|
On Tue, Feb 21, 2012 at 18:32, Roberto Sassu <rob...@po...> wrote: > I meant we can create a new package called for example 'ima-utils' > that can be used by Systemd to determine, at compile time, whether > the IMA support for loading custom policies should be enabled or not. That's not needed. There is no problem enabling ima support conditionally in ./configure. Build systems are unlikely to install ima in the buildroot anyway, when there is no library or anything to link against, so auto-detection is not really useful. A default to off and requiring an explicit enable sounds sufficient here. Kay |