| commit | c3d20103d08e5c0b6738fbd0acf3ca004e5356c5 | [log] [tgz] |
|---|---|---|
| author | Eric Paris <eparis@redhat.com> | Tue May 12 15:14:23 2009 -0400 |
| committer | James Morris <jmorris@namei.org> | Fri May 15 09:55:44 2009 +1000 |
| tree | 4231ff475f11231b3cbca949a7bcad37a9a8cc17 | |
| parent | f850a7c040d9faafb41bceb0a05d6bb7432c8c7a [diff] |
IMA: do not measure everything opened by root by default The IMA default policy measures every single file opened by root. This is terrible for most users. Consider a system (like mine) with virtual machine images. When those images are touched (which happens at boot for me) those images are measured. This is just way too much for the default case. Signed-off-by: Eric Paris <eparis@redhat.com> Acked-by: Mimi Zohar <zohar@us.ibm.com> Signed-off-by: James Morris <jmorris@namei.org>