diff --git a/ima-policy.service b/ima-policy.service index fb141f2..2a838a5 100644 --- a/ima-policy.service +++ b/ima-policy.service @@ -5,7 +5,7 @@ Description=Load the IMA Policy Type=oneshot RemainAfterExit=yes Environment=IMA_SECFS_POLICY=/sys/kernel/security/ima/policy -Environment=IMA_POLICY=/etc/ima/ima-policy +Environment=IMA_POLICY=/etc/ima/ima-policy.POST-SYSTEMD ExecStart=bash -c '[ -f $IMA_SECFS_POLICY ] && [ -f $IMA_POLICY ] && cat $IMA_POLICY > $IMA_SECFS_POLICY' TimeoutStartSec=0 diff --git a/rust-keylime.changes b/rust-keylime.changes index 6ffb1bf..e55a7b8 100644 --- a/rust-keylime.changes +++ b/rust-keylime.changes @@ -1,3 +1,8 @@ +------------------------------------------------------------------- +Wed Jun 7 09:08:22 UTC 2023 - Alberto Planas Dominguez + +- Recommends the IMA Policy subpackage only if SELinux is configured + ------------------------------------------------------------------- Mon Jun 05 08:41:33 UTC 2023 - aplanas@suse.com diff --git a/rust-keylime.spec b/rust-keylime.spec index 68eeb50..6e5f2d5 100644 --- a/rust-keylime.spec +++ b/rust-keylime.spec @@ -51,7 +51,7 @@ BuildRequires: tpm2-0-tss-devel Requires: libtss2-tcti-device0 Requires: logrotate Requires: tpm2.0-abrmd -Recommends: keylime-ima-policy +Recommends: (keylime-ima-policy if selinux-policy-targeted) Provides: user(keylime) %sysusers_requires # Disable this line if you wish to support all platforms. In most