IMA/EVM support utilities

Coiby Xu 61cbfcfb23 Don't allow files in tmpfs to be executed ... Resolves: https://issues.redhat.com/browse/RHEL-86010 Commit 83b610d ("Skip some file systems for appraisal") was to make gnome-shell work but the policy becomes unnecessarily unrestrictive. So only make an exception for mmap exec which may be needed by libffi. Fixes: 83b610d ("Skip some file systems for appraisal") Suggested-by: Marko Myllynen <myllynen@redhat.com> Signed-off-by: Coiby Xu <coxu@redhat.com>		2026-03-10 10:36:32 +08:00
tests	initial gating tests	2024-04-09 11:03:52 -04:00
.gitignore	v1.3	2020-07-26 13:51:27 +01:00
centosimarelease-10.der	Add IMA code signing certs	2024-11-08 10:58:05 +08:00
dracut-98-integrity.conf	Add some IMA setup tools	2024-11-08 10:58:05 +08:00
gating.yaml	initial gating tests	2024-04-09 11:03:52 -04:00
ima-add-sigs.sh	Use RSAHEADER to tell if a package has been signed	2025-10-30 09:00:16 +08:00
ima-evm-utils.spec	Release 1.6.2-4	2025-10-30 09:04:21 +08:00
ima-setup.sh	ima-setup: skip installing rpm-plugin-ima if it has been installed	2025-10-30 08:48:14 +08:00
policy_list	Skip some file systems for appraisal	2024-11-08 10:58:05 +08:00
policy-01-appraise-executable-and-lib-signatures	Don't allow files in tmpfs to be executed	2026-03-10 10:36:32 +08:00
policy-02-keylime-remote-attestation	Add some IMA setup tools	2024-11-08 10:58:05 +08:00
redhatimarelease-10.der	Add IMA code signing certs	2024-11-08 10:58:05 +08:00
sources	Update to upstream 1.6.2	2024-11-15 17:17:26 +08:00