[Starlingx-discuss] plan to remove IMA redundant kernel patch

[Chen, Haochuan Z]

Hi

I study this patch cgcs-root/stx/stx-integ/kernel/kernel-std/centos/patches/US101216-IMA-support-in-Titanium-kernel.patch

My assumption is that for integrity function code in kernel 3.10 is tool old, it introduces kernel module cgcs-root/stx/stx-integ/kernel/kernel-modules/integrity

So for CentOS 8 upgrade, as integrity in later kernel is already upgrade, what about remove this package
cgcs-root/stx/stx-integ/kernel/kernel-modules/integrity

And enable integrity config in cgcs-root/stx/stx-integ/kernel/kernel-std/centos/patches/kernel-3.10.0-x86_64.config.tis_extra
For ima.conf, we could move to cgcs-root/stx/stx-integ/config-files.

By this way, we could remove several redundant patches for IMA and easy for maintenance.

Wait for your opinion

Thanks!

Martin, Chen
SSP, Software Engineer
021-61164330

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.starlingx.io/pipermail/starlingx-discuss/attachments/20190218/4c85e418/attachment.html>