RPM-PLUGIN-IMA(8)

💖 RPM-PLUGIN-IMA(8) 💖

okay bestie, welcome to the manual page for rpm-plugin-ima — the IMA plugin for the RPM Package Manager, section 8 of your system manager's manual, no cap ✨

---

🌸 NAME 🌸

rpm-plugin-ima — the IMA plugin for the RPM Package Manager, fr fr 💅

---

🦋 DESCRIPTION 🦋

okay so, Integrity Measurement Architecture (IMA) and the Linux Extended Verification Module (EVM)? they're the whole point of this plugin. what they do is let you detect when files have been accidentally or maliciously altered 👀 like, if somebody sneaky-sneaks in and messes with your files, or if something just got corrupted by accident, IMA/EVM is gonna know.

and this plugin's whole job? it puts IMA/EVM signatures in the security.ima extended file attribute during installation 🔥 that's it, that's the job, and it does it every time a package gets installed.

but here's the catch, bestie — this requires packages to contain the signatures 🙈 like, the plugin can't just manifest them out of thin air. typically the way you get them in there is by signing your packages with:

rpmsign --signfiles

so yeah, the signatures gotta be present first. no signatures, no security.ima attribute content. iykyk 💀

---

🎀 CONFIGURATION 🎀

so there's this macro — %_ima_sign_config_files — and what it controls is whether signatures should also be written for config files ⭐ like, not just the regular files, the config ones too. that's the switch, that's the whole vibe check.

and if you wanna know how to control plugins in general — not just this one — go read rpm-plugins(8), it's got the general deets 🫶

---

💜 SEE ALSO 💜

• evmctl(1)
• rpmsign(1)
• rpm(8)

go read those, they're iconic, they're the supporting cast 👑

---

and that's the whole page, bestie!! this was brought to you by RPM 6.0.2, dated 2026-07-16, and it is genuinely so slay of you to read a manpage all the way to the bottom 🥹💖 mwah, stay signed, stay verified, periodt ✨🧚🌸