IMA/EVM support utilities
Go to file
Coiby Xu 91785f66e9 spec: Disable debug mode to not use level 1 optimization
Relates: RHEL-86010

Currently annocheck fails with the following message,
    # annocheck --no-use-debuginfod --ignore-unknown --debug-dir=./usr/lib/debug/ --verbose --profile=el10 ./usr/bin/evmctl
    ...
    FAIL: optimization test because level too low (based upon annobin data) (lto)

This is because ima-evm-utils enable debugging mode by default which in
turns enable -O1. RHEL's _d_optflags uses -O2. So disable debug mode
to honor this option.

Signed-off-by: Coiby Xu <coxu@redhat.com>
2026-03-12 12:08:28 +08:00
tests initial gating tests 2024-04-09 11:03:52 -04:00
.gitignore v1.3 2020-07-26 13:51:27 +01:00
centosimarelease-10.der Add IMA code signing certs 2024-11-08 10:58:05 +08:00
dracut-98-integrity.conf Add some IMA setup tools 2024-11-08 10:58:05 +08:00
gating.yaml initial gating tests 2024-04-09 11:03:52 -04:00
ima-add-sigs.sh Use RSAHEADER to tell if a package has been signed 2025-10-30 09:00:16 +08:00
ima-evm-utils.spec spec: Disable debug mode to not use level 1 optimization 2026-03-12 12:08:28 +08:00
ima-setup.sh ima-setup: skip installing rpm-plugin-ima if it has been installed 2025-10-30 08:48:14 +08:00
policy_list Skip some file systems for appraisal 2024-11-08 10:58:05 +08:00
policy-01-appraise-executable-and-lib-signatures Don't allow files in tmpfs to be executed 2026-03-10 10:36:32 +08:00
policy-02-keylime-remote-attestation Add some IMA setup tools 2024-11-08 10:58:05 +08:00
redhatimarelease-10.der Add IMA code signing certs 2024-11-08 10:58:05 +08:00
sources Update to upstream 1.6.2 2024-11-15 17:17:26 +08:00