[Linux-ima-user] question about IMA-Appraisal

[jiangdahui <jd...@ye...>]

hi all:
      how to verify IMA-Appraisal's effect?change a executable file?but I find it can still run normally? or observe the "security.evm" attr? how?




best regards!