1 files changed, 8 insertions, 1 deletions
diff --git a/meta-integrity/recipes-security/ima_policy_appraise_all/files/ima_policy_appraise_all b/meta-integrity/recipes-security/ima_policy_appraise_all/files/ima_policy_appraise_all
index 36e71a7..3498025 100644
--- a/meta-integrity/recipes-security/ima_policy_appraise_all/files/ima_policy_appraise_all
+++ b/meta-integrity/recipes-security/ima_policy_appraise_all/files/ima_policy_appraise_all
@@ -25,5 +25,12 @@ dont_appraise fsmagic=0xf97cff8c
 dont_appraise fsmagic=0x6e736673
 # EFIVARFS_MAGIC
 dont_appraise fsmagic=0xde5e81e4
+# Cgroup
+dont_appraise fsmagic=0x27e0eb
+# Cgroup2
+dont_appraise fsmagic=0x63677270
-appraise
+# Appraise libraries
+appraise func=MMAP_CHECK mask=MAY_EXEC
+# Appraise executables
+appraise func=BPRM_CHECK

diff --git a/meta-integrity/recipes-security/ima_policy_appraise_all/files/ima_policy_appraise_all b/meta-integrity/recipes-security/ima_policy_appraise_all/files/ima_policy_appraise_all index 36e71a7..3498025 100644 --- a/meta-integrity/recipes-security/ima_policy_appraise_all/files/ima_policy_appraise_all +++ b/meta-integrity/recipes-security/ima_policy_appraise_all/files/ima_policy_appraise_all
@@ -25,5 +25,12 @@ dont_appraise fsmagic=0xf97cff8c
25	dont_appraise fsmagic=0x6e736673	25	dont_appraise fsmagic=0x6e736673
26	# EFIVARFS_MAGIC	26	# EFIVARFS_MAGIC
27	dont_appraise fsmagic=0xde5e81e4	27	dont_appraise fsmagic=0xde5e81e4
		28	# Cgroup
		29	dont_appraise fsmagic=0x27e0eb
		30	# Cgroup2
		31	dont_appraise fsmagic=0x63677270
28		32
29	appraise	33	# Appraise libraries
		34	appraise func=MMAP_CHECK mask=MAY_EXEC
		35	# Appraise executables
		36	appraise func=BPRM_CHECK