---
name: "rpm-plugin-ima"
section: "8"
platform: "linux"
package: "rpm"
version: "4.18.0+dfsg-1+deb12u1"
release: "Debian 12 (Bookworm)"
platforms: ["linux"]
url: "https://new.carta.tech/rpm-plugin-ima"
---

# rpm-plugin-ima(8)

IMA plugin for the RPM Package Manager

## NAME

rpm-plugin-ima - IMA plugin for the RPM Package Manager

## Description

Integrity Measurement Architecture (IMA) and the Linux Extended Verification Module (EVM) allow to detect when files have been accidentally or maliciously altered. This plugin puts IMA/EVM signatures in the *security.ima* extended file attribute during installation. This requires packages to contain the signatures - typically by being signed with **rpmsign --signfiles**.

## Configuration

The *%\_ima\_sign\_config\_files* macro controls whether signatures should also be written for config files.

See [**rpm-plugins**(8)](/rpm-plugins/8.md) on how to control plugins in general.

## SEE ALSO

[*evmctl*(1)](/evmctl/1.md) [*rpmsign*(8)](/rpmsign/8.md) [*rpm*(8)](/rpm/8.md)