.\" Automatically generated by Pandoc 3.1.3
.\"
.\" Define V font for inline verbatim, using C font in formats
.\" that render this, and otherwise B font.
.ie "\f[CB]x\f[]"x" \{\
. ftr V B
. ftr VI BI
. ftr VB B
. ftr VBI BI
.\}
.el \{\
. ftr V CR
. ftr VI CI
. ftr VB CB
. ftr VBI CBI
.\}
.TH "RPM-IMA" "8" "28 Jan 2020" "" ""
.hy
.SH NAME
.PP
rpm-plugin-ima - IMA plugin for the RPM Package Manager
.SH Description
.PP
Integrity Measurement Architecture (IMA) and the Linux Extended
Verification Module (EVM) allow to detect when files have been
accidentally or maliciously altered.
This plugin puts IMA/EVM signatures in the \f[I]security.ima\f[R]
extended file attribute during installation.
This requires packages to contain the signatures - typically by being
signed with \f[B]rpmsign --signfiles\f[R].
.SH Configuration
.PP
The \f[I]%_ima_sign_config_files\f[R] macro controls whether signatures
should also be written for config files.
.PP
See \f[B]rpm-plugins\f[R](8) on how to control plugins in general.
.SH SEE ALSO
.PP
\f[B]evmctl\f[R](1), \f[B]rpmsign\f[R](8), \f[B]rpm\f[R](8)