init.ima: Fix the failure when importing the external policy from real rootfs

Signed-off-by: Jia Zhang <zhang.jia@linux.alibaba.com>

1 files changed, 3 insertions, 1 deletions

diff --git a/meta-integrity/recipes-core/initrdscripts/files/init.ima b/meta-integrity/recipes-core/initrdscripts/files/init.ima
index 6cd7c88..a15cd8f 100755
--- a/meta-integrity/recipes-core/initrdscripts/files/init.ima
+++ b/meta-integrity/recipes-core/initrdscripts/files/init.ima
@@ -121,7 +121,9 @@ done
 echo "${IMA_POLICY}" > "$securityfs_dir/ima/policy" && {
     # Attempt to load IMA policies from the real rootfs.
     for policy in ${ROOT_DIR}/etc/ima/ima_policy*; do
-        echo "$policy" > "$securityfs_dir/ima/policy"
+        if [ -s "$policy" ]; then
+            "${ROOT_DIR}/bin/echo.coreutils" "$policy" > "$securityfs_dir/ima/policy"
+        endif
     done
 
     exit 0