tree 4231ff475f11231b3cbca949a7bcad37a9a8cc17
parent f850a7c040d9faafb41bceb0a05d6bb7432c8c7a
author Eric Paris <eparis@redhat.com> 1242155663 -0400
committer James Morris <jmorris@namei.org> 1242345344 +1000

IMA: do not measure everything opened by root by default

The IMA default policy measures every single file opened by root.  This is
terrible for most users.  Consider a system (like mine) with virtual machine
images.  When those images are touched (which happens at boot for me) those
images are measured.  This is just way too much for the default case.

Signed-off-by: Eric Paris <eparis@redhat.com>
Acked-by: Mimi Zohar <zohar@us.ibm.com>
Signed-off-by: James Morris <jmorris@namei.org>