diff --git a/systemd.changes b/systemd.changes index 10d34daa..5f65d117 100644 --- a/systemd.changes +++ b/systemd.changes @@ -1,3 +1,11 @@ +------------------------------------------------------------------- +Mon Mar 20 07:48:49 UTC 2023 - Alberto Planas Dominguez + +- Enable that systemd can load the IMA policy from + /etc/ima/ima-policy. This is used to complement dracut-ima when + using SELinux, as the SELinux policy should not be loaded in the + initrd (https://github.com/openSUSE/microos-tools/pull/14) + ------------------------------------------------------------------- Thu Mar 16 07:33:21 UTC 2023 - Franck Bui diff --git a/systemd.spec b/systemd.spec index a234cc12..121afe13 100644 --- a/systemd.spec +++ b/systemd.spec @@ -684,7 +684,6 @@ export CFLAGS="%{optflags} -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2" \ -Dbump-proc-sys-fs-nr-open=false \ -Dgshadow=false \ - -Dima=false \ -Dldconfig=false \ -Dsmack=false \ \ @@ -695,6 +694,7 @@ export CFLAGS="%{optflags} -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2" -Defi=%{when_not bootstrap} \ -Delfutils=%{when_not bootstrap} \ -Dhtml=%{when_not bootstrap} \ + -Dima=%{when_not bootstrap} \ -Dlibcryptsetup-plugins=%{when_not bootstrap} \ -Dman=%{when_not bootstrap} \ -Dnss-myhostname=%{when_not bootstrap} \