Re: [Linux-ima-user] Problem in determining IMA is already enable or not

[Mimi Z. <zo...@li...>]

On Fri, 2015-06-05 at 22:47 +0800, r0uruni Zzzz wrote:
> Hi,
> Im new in this area and using the Fedora 22. I try to determine whether the
> IMA has been enable or not by inputting "*sudo* *mount -t securityfs
> security /sys/kernel/security*" . However, the output is "*mount: already
> mount or /sys/kernel/security is busy*" . Does this mean that IMA is
> already supported ?

In general, to check whether or not a system has IMA enabled, once
<securityfs> is mounted, check to see if any IMA files exist
<securityfs>/ima (eg. binary_runtime_measurements,
ascii_runtime_measurements, policy, etc).

The linux-integrity (eg. IMA) is enabled on RHEL, but not Fedora.

Mimi