[Rpm-maint] [rpm-software-management/rpm] Request to apply IMA signatures to files even if deemed a configuration file (#364)

Jeff Johnson notifications at github.com
Sat Feb 10 14:36:05 UTC 2018


I have read #364, the basis of which is a belief that security policies like ima should be set by the end user, not the packager.

An imperfect implementation in rpm to generate ima signatures that are invalid when %config files are altered seems a pointless mechanism to generate useless false positives.


-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/rpm-software-management/rpm/issues/364#issuecomment-364659266
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.rpm.org/pipermail/rpm-maint/attachments/20180210/67cd8f79/attachment.html>


More information about the Rpm-maint mailing list