Eric Paris c3d20103d0 IMA: do not measure everything opened by root by default ... The IMA default policy measures every single file opened by root. This is terrible for most users. Consider a system (like mine) with virtual machine images. When those images are touched (which happens at boot for me) those images are measured. This is just way too much for the default case. Signed-off-by: Eric Paris <eparis@redhat.com> Acked-by: Mimi Zohar <zohar@us.ibm.com> Signed-off-by: James Morris <jmorris@namei.org>		2009-05-15 09:55:44 +10:00
..
ima	IMA: do not measure everything opened by root by default	2009-05-15 09:55:44 +10:00