Skip to content

Commit

Permalink
fix(integrity): do not display any error if there is no IMA certificate
Browse files Browse the repository at this point in the history
IMA appraisal can be used without digital signatures, just by storing hash
digests instead.
  • Loading branch information
aafeijoo-suse authored and johannbg committed May 26, 2022
1 parent b452270 commit f63f411
Showing 1 changed file with 1 addition and 2 deletions.
3 changes: 1 addition & 2 deletions modules.d/98integrity/ima-keys-load.sh
Original file line number Diff line number Diff line change
Expand Up @@ -17,8 +17,7 @@ load_x509_keys() {
IMAKEYSDIR="/etc/keys/ima"
fi

PUBKEY_LIST=$(ls "${NEWROOT}"${IMAKEYSDIR}/*)
for PUBKEY in ${PUBKEY_LIST}; do
for PUBKEY in "${NEWROOT}${IMAKEYSDIR}"/*; do
# check for public key's existence
if [ ! -f "${PUBKEY}" ]; then
if [ "${RD_DEBUG}" = "yes" ]; then
Expand Down

0 comments on commit f63f411

Please sign in to comment.