From 41d9804ed9326f5b326b3b62e5715cc4d7f69ef79ce49940e3b1e8f5ea194740 Mon Sep 17 00:00:00 2001 From: Franck Bui Date: Mon, 20 Mar 2023 08:20:36 +0000 Subject: [PATCH] Accepting request 1073043 from home:aplanas:branches:Base:System - Enable that systemd can load the IMA policy from /etc/ima/ima-policy. This is used to complement dracut-ima when using SELinux, as the SELinux policy should not be loaded in the initrd (https://github.com/openSUSE/microos-tools/pull/14) OBS-URL: https://build.opensuse.org/request/show/1073043 OBS-URL: https://build.opensuse.org/package/show/Base:System/systemd?expand=0&rev=1360 --- systemd.changes | 8 ++++++++ systemd.spec | 2 +- 2 files changed, 9 insertions(+), 1 deletion(-) diff --git a/systemd.changes b/systemd.changes index 10d34daa..5f65d117 100644 --- a/systemd.changes +++ b/systemd.changes @@ -1,3 +1,11 @@ +------------------------------------------------------------------- +Mon Mar 20 07:48:49 UTC 2023 - Alberto Planas Dominguez + +- Enable that systemd can load the IMA policy from + /etc/ima/ima-policy. This is used to complement dracut-ima when + using SELinux, as the SELinux policy should not be loaded in the + initrd (https://github.com/openSUSE/microos-tools/pull/14) + ------------------------------------------------------------------- Thu Mar 16 07:33:21 UTC 2023 - Franck Bui diff --git a/systemd.spec b/systemd.spec index a234cc12..121afe13 100644 --- a/systemd.spec +++ b/systemd.spec @@ -684,7 +684,6 @@ export CFLAGS="%{optflags} -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2" \ -Dbump-proc-sys-fs-nr-open=false \ -Dgshadow=false \ - -Dima=false \ -Dldconfig=false \ -Dsmack=false \ \ @@ -695,6 +694,7 @@ export CFLAGS="%{optflags} -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2" -Defi=%{when_not bootstrap} \ -Delfutils=%{when_not bootstrap} \ -Dhtml=%{when_not bootstrap} \ + -Dima=%{when_not bootstrap} \ -Dlibcryptsetup-plugins=%{when_not bootstrap} \ -Dman=%{when_not bootstrap} \ -Dnss-myhostname=%{when_not bootstrap} \