diff options
| author | Ming Liu <liu.ming50@gmail.com> | 2021-03-01 13:35:58 +0100 |
|---|---|---|
| committer | Armin Kuster <akuster808@gmail.com> | 2021-03-02 11:56:27 -0800 |
| commit | 9504d02694d89302a867f296b73e884c03413fd3 (patch) | |
| tree | 72381cbda2954798a884511539da5747df32f176 | |
| parent | 6d810428600b84df6cd7f4342963fd3bb58aa73b (diff) | |
| download | meta-security-9504d02694d89302a867f296b73e884c03413fd3.tar.gz | |
ima-policy-hashed: add CGROUP2_SUPER_MAGIC fsmagic
This fixes following systemd boot issues:
[ 7.455580] systemd[1]: Failed to create /init.scope control group: Permission denied
[ 7.457677] systemd[1]: Failed to allocate manager object: Permission denied
[!!!!!!] Failed to allocate manager object.
[ 7.459270] systemd[1]: Freezing execution.
Signed-off-by: Ming Liu <liu.ming50@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
| -rw-r--r-- | meta-integrity/recipes-security/ima_policy_hashed/files/ima_policy_hashed | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/meta-integrity/recipes-security/ima_policy_hashed/files/ima_policy_hashed b/meta-integrity/recipes-security/ima_policy_hashed/files/ima_policy_hashed index 7f89c8d..4d9e4ca 100644 --- a/meta-integrity/recipes-security/ima_policy_hashed/files/ima_policy_hashed +++ b/meta-integrity/recipes-security/ima_policy_hashed/files/ima_policy_hashed | |||
| @@ -53,6 +53,9 @@ dont_measure fsmagic=0x43415d53 | |||
| 53 | # CGROUP_SUPER_MAGIC | 53 | # CGROUP_SUPER_MAGIC |
| 54 | dont_appraise fsmagic=0x27e0eb | 54 | dont_appraise fsmagic=0x27e0eb |
| 55 | dont_measure fsmagic=0x27e0eb | 55 | dont_measure fsmagic=0x27e0eb |
| 56 | # CGROUP2_SUPER_MAGIC | ||
| 57 | dont_appraise fsmagic=0x63677270 | ||
| 58 | dont_measure fsmagic=0x63677270 | ||
| 56 | # EFIVARFS_MAGIC | 59 | # EFIVARFS_MAGIC |
| 57 | dont_appraise fsmagic=0xde5e81e4 | 60 | dont_appraise fsmagic=0xde5e81e4 |
| 58 | dont_measure fsmagic=0xde5e81e4 | 61 | dont_measure fsmagic=0xde5e81e4 |