Created
January 11, 2018 15:58
-
-
Save dongsupark/2b1d31cc516c263edc56fa95b31a87ee to your computer and use it in GitHub Desktop.
/sys/kernel/security/ima/policy with both force options
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| dont_measure fsmagic=0x9fa0 | |
| dont_measure fsmagic=0x62656572 | |
| dont_measure fsmagic=0x64626720 | |
| dont_measure fsmagic=0x1021994 | |
| dont_measure fsmagic=0x1cd1 | |
| dont_measure fsmagic=0x42494e4d | |
| dont_measure fsmagic=0x73636673 | |
| dont_measure fsmagic=0xf97cff8c | |
| dont_measure fsmagic=0x27e0eb | |
| dont_measure fsmagic=0x63677270 | |
| dont_measure fsmagic=0x6e736673 | |
| measure func=MMAP_CHECK mask=MAY_EXEC | |
| measure func=BPRM_CHECK mask=MAY_EXEC | |
| measure func=FILE_CHECK euid=0 | |
| measure func=FILE_CHECK uid=0 | |
| measure func=MODULE_CHECK | |
| measure func=FIRMWARE_CHECK | |
| measure func=POLICY_CHECK | |
| measure fsmagic=0x65735546 force | |
| dont_appraise fsmagic=0x9fa0 | |
| dont_appraise fsmagic=0x62656572 | |
| dont_appraise fsmagic=0x64626720 | |
| dont_appraise fsmagic=0x1021994 | |
| dont_appraise fsmagic=0x858458f6 | |
| dont_appraise fsmagic=0x1cd1 | |
| dont_appraise fsmagic=0x42494e4d | |
| dont_appraise fsmagic=0x73636673 | |
| dont_appraise fsmagic=0xf97cff8c | |
| dont_appraise fsmagic=0x6e736673 | |
| dont_appraise fsmagic=0x27e0eb | |
| dont_appraise fsmagic=0x63677270 | |
| appraise func=POLICY_CHECK appraise_type=imasig | |
| appraise fowner=0 appraise_type=imasig | |
| appraise fsmagic=0x65735546 force |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment