Comment 4 for bug 1798415

Revision history for this message
Yong Fu (fuyong) wrote :

I am using the 2019.06.26/06.23/06.20 version of the ISO, duplex mode, which does not reproduce the phenomenon you describe.
The operation is as follows:
0. Operate in controller-0 and controller-1 respectively.
1. sudo touch /home/sysadmin/TEMP
2. sudo chmod 755 /home/sysadmin /TEMP
3. Append content to monitored file
echo "ls" | sudo -S tee -a /home/sysadmin /TEMP
4. Execute created file
sudo /home/sysadmin /TEMP
5. sudo rm /home/sysadmin /TEMP

No IMA appraisal failure is logged in fm-event.log after deleting the file.
There is also no ima.log file in the /va/log/ directory.

Number of operations: 5 tests per version

I will try to use the 2018.10 version tomorrow to test if my steps are correct.