tree e4e1fa97be0bd3e749f993b99d18746c8a9737ba
parent b103387037cea2ba0f04b44d408d54c53f678061
author Eric Paris <eparis@redhat.com> 1242155635 -0400
committer James Morris <jmorris@namei.org> 1242345341 +1000

IMA: remove read permissions on the ima policy file

The IMA policy file does not implement read.  Trying to just open/read/close
the file will load a blank policy and you cannot then change the policy
without a reboot.  This removes the read permission from the file so one must
at least be attempting to write...

Signed-off-by: Eric Paris <eparis@redhat.com>
Acked-by: Mimi Zohar <zohar@us.ibm.com>
Signed-off-by: James Morris <jmorris@namei.org>