From: Eric Paris <eparis@redhat.com>
Date: Tue, 12 May 2009 19:13:55 +0000 (-0400)
Subject: IMA: remove read permissions on the ima policy file
X-Git-Tag: v2.6.31-rc1~395^2^2~24
X-Git-Url: http://git.openpandora.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=f850a7c040d9faafb41bceb0a05d6bb7432c8c7a;p=pandora-kernel.git

IMA: remove read permissions on the ima policy file

The IMA policy file does not implement read.  Trying to just open/read/close
the file will load a blank policy and you cannot then change the policy
without a reboot.  This removes the read permission from the file so one must
at least be attempting to write...

Signed-off-by: Eric Paris <eparis@redhat.com>
Acked-by: Mimi Zohar <zohar@us.ibm.com>
Signed-off-by: James Morris <jmorris@namei.org>
---

Reading git-diff-tree failed