From f13d2e0ef8a32b0ad3fe5b06eae8e03179eba943 Mon Sep 17 00:00:00 2001 From: Jia Zhang Date: Mon, 19 Mar 2018 17:04:03 -0400 Subject: init.ima: Fix the failure when importing the external policy from real rootfs Signed-off-by: Jia Zhang --- meta-integrity/recipes-core/initrdscripts/files/init.ima | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/meta-integrity/recipes-core/initrdscripts/files/init.ima b/meta-integrity/recipes-core/initrdscripts/files/init.ima index 6cd7c88..a15cd8f 100755 --- a/meta-integrity/recipes-core/initrdscripts/files/init.ima +++ b/meta-integrity/recipes-core/initrdscripts/files/init.ima @@ -121,7 +121,9 @@ done echo "${IMA_POLICY}" > "$securityfs_dir/ima/policy" && { # Attempt to load IMA policies from the real rootfs. for policy in ${ROOT_DIR}/etc/ima/ima_policy*; do - echo "$policy" > "$securityfs_dir/ima/policy" + if [ -s "$policy" ]; then + "${ROOT_DIR}/bin/echo.coreutils" "$policy" > "$securityfs_dir/ima/policy" + endif done exit 0 -- cgit v1.2.3-54-g00ecf