Re: [PATCH v2 0/2] support to read and tune appraise mode in runtime

From: Tianjia Zhang
Date: Sun Apr 12 2020 - 22:23:43 EST




On 2020/4/12 5:43, Nayna wrote:

On 4/9/20 6:34 AM, Tianjia Zhang wrote:
Support the read and write operations of ima_appraise by adding a
securifyfs file 'appraise_mode'.

In order to tune appraise mode in runtime, writing a PKCS#7 signature

I am curious to know why would you tune appraise mode in runtime ?

Thanks & Regards,

ÂÂÂÂÂ - Nayna

Mainly used for emergency shutdown under some abnormal conditions.

Thanks,
Tianjia