[Rpm-maint] [rpm-software-management/rpm] Request to apply IMA signatures to files even if deemed a configuration file (#364)

Stefan Berger notifications at github.com
Wed Dec 6 15:55:11 UTC 2017


A potential side-effect of having signatures applied to configuration files is that the configuration files may be modified by the user or programs / post-installation scripts and the signature on these files may become invalid or be removed as part of the modification of the configuration file. That 'a file installed by an RPM will have the correct signature' will therefore not be true for those configuration files.

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/rpm-software-management/rpm/issues/364#issuecomment-349682417
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.rpm.org/pipermail/rpm-maint/attachments/20171206/e6b9aa95/attachment.html>


More information about the Rpm-maint mailing list