On Sat, Oct 16, 2010 at 02:10:29PM -0700, H. Peter Anvin wrote:
I'm confused ... what makes you think we are? This might have
been an unintentional misconfiguration...
I didn't mean to imply you enabled it intentionally. In fact it looks
like the inode tracking in IMA is always on once it's compiled in, which
totally defeats the purpose of doing it's on iternal inode tracking
instead of bloating the inode what they originally proposed. IMA really
needs a kernel parameter to only enabled this crap when people actually
And whoever turned it on in Fedora needs some serious wahcking.