summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
-rwxr-xr-xmeta-integrity/recipes-core/initrdscripts/files/init.ima2
1 files changed, 1 insertions, 1 deletions
diff --git a/meta-integrity/recipes-core/initrdscripts/files/init.ima b/meta-integrity/recipes-core/initrdscripts/files/init.ima
index 5d12945..6cd7c88 100755
--- a/meta-integrity/recipes-core/initrdscripts/files/init.ima
+++ b/meta-integrity/recipes-core/initrdscripts/files/init.ima
@@ -100,7 +100,7 @@ keyring_id=0x`grep '\skeyring\s*\.ima: ' "${ROOT_DIR}/proc/keys" | awk '{ print
100# The trusted IMA certificate /etc/keys/x509_evm.der in initramfs was 100# The trusted IMA certificate /etc/keys/x509_evm.der in initramfs was
101# automatically loaded by kernel already. Here is the opportunity to load 101# automatically loaded by kernel already. Here is the opportunity to load
102# a custom IMA certificate from the real rootfs. 102# a custom IMA certificate from the real rootfs.
103for cert in ${ROOT_DIR}/etc/keys/x509_evm*.crt; do 103for cert in ${ROOT_DIR}/etc/keys/x509_evm*.der; do
104 [ ! -s "$cert" ] && continue 104 [ ! -s "$cert" ] && continue
105 105
106 if ! evmctl import "$cert" "$keyring_id" >"${ROOT_DIR}/dev/null"; then 106 if ! evmctl import "$cert" "$keyring_id" >"${ROOT_DIR}/dev/null"; then