8161158639
This is an S/MIME signed message The new function ima_setup() loads an IMA custom policy from a file in the default location '/etc/ima/ima-policy', if present, and writes it to the path 'ima/policy' in the security filesystem. This function is executed at early stage in order to avoid that some file operations are not measured by IMA and it is placed after the initialization of SELinux because IMA needs the latter (or other security modules) to understand LSM-specific rules. This feature is enabled by default and can be disabled by providing the option '--disable-ima' to the configure script. Signed-off-by: Roberto Sassu <roberto.sassu@polito.it> Acked-by: Gianluca Ramunno <ramunno@polito.it>
70 lines
1.7 KiB
C
70 lines
1.7 KiB
C
/*-*- Mode: C; c-basic-offset: 8; indent-tabs-mode: nil -*-*/
|
|
|
|
#ifndef foobuildhfoo
|
|
#define foobuildhfoo
|
|
|
|
/***
|
|
This file is part of systemd.
|
|
|
|
Copyright 2010 Lennart Poettering
|
|
|
|
systemd is free software; you can redistribute it and/or modify it
|
|
under the terms of the GNU General Public License as published by
|
|
the Free Software Foundation; either version 2 of the License, or
|
|
(at your option) any later version.
|
|
|
|
systemd is distributed in the hope that it will be useful, but
|
|
WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
|
|
General Public License for more details.
|
|
|
|
You should have received a copy of the GNU General Public License
|
|
along with systemd; If not, see <http://www.gnu.org/licenses/>.
|
|
***/
|
|
|
|
#ifdef HAVE_PAM
|
|
#define _PAM_FEATURE_ "+PAM"
|
|
#else
|
|
#define _PAM_FEATURE_ "-PAM"
|
|
#endif
|
|
|
|
#ifdef HAVE_LIBWRAP
|
|
#define _LIBWRAP_FEATURE_ "+LIBWRAP"
|
|
#else
|
|
#define _LIBWRAP_FEATURE_ "-LIBWRAP"
|
|
#endif
|
|
|
|
#ifdef HAVE_AUDIT
|
|
#define _AUDIT_FEATURE_ "+AUDIT"
|
|
#else
|
|
#define _AUDIT_FEATURE_ "-AUDIT"
|
|
#endif
|
|
|
|
#ifdef HAVE_SELINUX
|
|
#define _SELINUX_FEATURE_ "+SELINUX"
|
|
#else
|
|
#define _SELINUX_FEATURE_ "-SELINUX"
|
|
#endif
|
|
|
|
#ifdef HAVE_IMA
|
|
#define _IMA_FEATURE_ "+IMA"
|
|
#else
|
|
#define _IMA_FEATURE_ "-IMA"
|
|
#endif
|
|
|
|
#ifdef HAVE_SYSV_COMPAT
|
|
#define _SYSVINIT_FEATURE_ "+SYSVINIT"
|
|
#else
|
|
#define _SYSVINIT_FEATURE_ "-SYSVINIT"
|
|
#endif
|
|
|
|
#ifdef HAVE_LIBCRYPTSETUP
|
|
#define _LIBCRYPTSETUP_FEATURE_ "+LIBCRYPTSETUP"
|
|
#else
|
|
#define _LIBCRYPTSETUP_FEATURE_ "-LIBCRYPTSETUP"
|
|
#endif
|
|
|
|
#define SYSTEMD_FEATURES _PAM_FEATURE_ " " _LIBWRAP_FEATURE_ " " _AUDIT_FEATURE_ " " _SELINUX_FEATURE_ " " _IMA_FEATURE_ " " _SYSVINIT_FEATURE_ " " _LIBCRYPTSETUP_FEATURE_
|
|
|
|
#endif
|