ima_update_policy(9)

💅 ima_update_policy(9) 💅

okay so this is a page from the Kernel API Manual, and the star of the show is ima_update_policy — like, the function that swaps in a whole new set of measure rules. buckle up, bestie 🎀

---

✨ NAME ✨

ima_update_policy — updates default_rules with brand new measure rules. that's it, that's the vibe 🦋

---

🌸 SYNOPSIS 🌸

void ima_update_policy (void );

literally no arguments, no return value, just pure main character energy 👑

---

🎀 ARGUMENTS 🎀

• void — no arguments. nothing. zero. empty plate, and honestly? she ate 💅

---

💖 DESCRIPTION 💖

okay so here's the tea ☕ — this one gets called on file .release to update the default rules with a complete new policy. like a whole glow-up for the rule set ✨

what we actually do here is splice ima_policy_rules and ima_temp_rules together so they make a queue. and the policy may be updated multiple times — she's not a one-time thing — and this right here is the RCU updater 🧚

policy rules are never deleted, so ima_policy_flag gets zeroed only once, that one moment when we switch from the default policy over to user defined. one and done, no cap 💀

---

🔥 SEE ALSO 🔥

• Kernel file ./security/integrity/ima/ima_policy.c 👀
• ima_match_rule_data(9)
• ima_match_rules(9)
• ima_match_policy(9)
• ima_update_policy_flags(9)
• ima_init_policy(9)
• ima_parse_add_rule(9)
• ima_delete_rules(9)
• ima_measure_loaded_policy(9)

---

and that's the whole page, bestie 🫶 this lil number lives in ./security/integrity/ima, dated October 2026, and she's filed under ima_update_policy(9) — iconic, no notes 🌈💜