[PATCH v2 0/2] support to read and tune appraise mode in runtime

Tianjia Zhang tianjia.zhang at linux.alibaba.com
Mon Apr 13 02:23:35 UTC 2020



On 2020/4/12 5:43, Nayna wrote:
> 
> On 4/9/20 6:34 AM, Tianjia Zhang wrote:
>> Support the read and write operations of ima_appraise by adding a
>> securifyfs file 'appraise_mode'.
>>
>> In order to tune appraise mode in runtime, writing a PKCS#7 signature
> 
> I am curious to know why would you tune appraise mode in runtime ?
> 
> Thanks & Regards,
> 
>        - Nayna

Mainly used for emergency shutdown under some abnormal conditions.

Thanks,
Tianjia



More information about the Linux-security-module-archive mailing list