Re: [Linux-ima-user] IMA (latest patches) do not allow creation of in policy files.

[Curtis V. <cu...@vp...>]

The kernel command line is set in both an efi bootloader and in the kernel itself so when using the bootloader I
Get many arguments doubled...
"ima_tcb ima_appraise_tcb biosdevname=0 net.ifnames=0 console=ttyS1,115200n8 usbcore.autosuspend=-1 rootflags-i_version \vmlinuz-4.0.3-040003-ima ro root=/dev/sda3 ima_tcb ima_appraise_tcb biosdevname=0 net.ifnames=0 console=ttyS1,115200n8 usbcore.autosuspend=-1 rootflags-i_version" 

Looks like I could have skipped adding the command line args that were built in.

Should I try setting i_version at the beginning of the command line?
   
Hopefully the sequence of commands and the resulting behavior from the email a few minutes ago  is informative.

Regards,
Curtis
> -----Original Message-----
> From: Mimi Zohar [mailto:zo...@li...] 
...

> What is the boot command line (/proc/cmdline)?  Remove "ima_appraise=fix" from the boot command line if present.
> 
> Mimi