IMA/EVM support utilities
478b5e4548
Resolves: https://issues.redhat.com/browse/RHEL-34778 Conflict: Upstream has -libs subpackage Upstream Status: https://src.fedoraproject.org/rpms/ima-evm-utils.git commit 8980421a049c776e2b77e534793aafb925b3ad48 Author: Coiby Xu <coiby.xu@gmail.com> Date: Mon May 6 17:48:52 2024 +0800 Add some IMA setup tools Some IMA setup tools are added to ease IMA setup which will do the following tasks, - add IMA signatures to installed packages files - load IMA keys and policy - enable the dracut integrity module to load IMA keys and policy automatically Two IMA polices as suggested by Stefan Berger are also provided which will be signed automatically with other package files. Thanks to Marko Myllynen for coming up with the idea to have a tool similar to fips-mode-setup. And thanks to Mimi Zohar and Stefan Berger for providing the feedback! Signed-off-by: Coiby Xu <coxu@redhat.com> Signed-off-by: Coiby Xu <coxu@redhat.com> |
||
|---|---|---|
| tests | ||
| .gitignore | ||
| dracut-98-integrity.conf | ||
| gating.yaml | ||
| ima-add-sigs.sh | ||
| ima-evm-utils.spec | ||
| ima-setup.sh | ||
| policy_list | ||
| policy-01-appraise-exectuables-and-lib-signatures | ||
| policy-02-keylime-remote-attestation | ||
| sources | ||