9c72843aa1
Signed-off-by: Dean Troyer <dtroyer@gmail.com>
5 lines
225 B
Plaintext
5 lines
225 B
Plaintext
# EXT4_SUPER_MAGIC
|
|
measure func=FILE_CHECK uid=0 fsmagic=0xEF53
|
|
appraise func=FILE_MMAP mask=MAY_EXEC uid=0 appraise_type=imasig fsmagic=0xEF53
|
|
appraise func=BPRM_CHECK mask=MAY_EXEC uid=0 appraise_type=imasig fsmagic=0xEF53
|