Hi I study this patch cgcs-root/stx/stx-integ/kernel/kernel-std/centos/patches/US101216-IMA-support-in-Titanium-kernel.patch My assumption is that for integrity function code in kernel 3.10 is tool old, it introduces kernel module cgcs-root/stx/stx-integ/kernel/kernel-modules/integrity So for CentOS 8 upgrade, as integrity in later kernel is already upgrade, what about remove this package cgcs-root/stx/stx-integ/kernel/kernel-modules/integrity And enable integrity config in cgcs-root/stx/stx-integ/kernel/kernel-std/centos/patches/kernel-3.10.0-x86_64.config.tis_extra For ima.conf, we could move to cgcs-root/stx/stx-integ/config-files. By this way, we could remove several redundant patches for IMA and easy for maintenance. Wait for your opinion Thanks! Martin, Chen SSP, Software Engineer 021-61164330