ima: Ensure policy exists before asking the kernel to load it (#5777)
authorBenjamin Gilbert <bgilbert@backtick.net>
Fri, 21 Apr 2017 08:53:40 +0000 (01:53 -0700)
committerLennart Poettering <lennart@poettering.net>
Fri, 21 Apr 2017 08:53:40 +0000 (10:53 +0200)
commita2c74c0ce83ff16fad95fe18d8e7ae0e2817f672
tree03d5ec4dd32d1cc10f8e1289781f7bc058207cab
parent5bf13866244ba2691ed1eb4ba5966ed82712e3ca
ima: Ensure policy exists before asking the kernel to load it (#5777)

e8e42b31c5a950a7b43d64f4a531ec59750e823e added support for having the
kernel load the IMA policy directly, but didn't check that the policy
file exists.  If not, this produced a kernel message:

    IMA: policy update failed
src/core/ima-setup.c