---
name: "rpm-plugin-ima"
section: "8"
platform: "linux"
package: "rpm"
version: "4.18.0+dfsg-1+deb12u1"
release: "Debian 12 (Bookworm)"
platforms: ["linux"]
url: "https://carta.tech/man/rpm-plugin-ima"
---

# rpm-plugin-ima(8)

IMA plugin for the RPM Package Manager

## NAME

rpm-plugin-ima - IMA plugin for the RPM Package Manager

## Description

Integrity Measurement Architecture (IMA) and the Linux Extended Verification Module (EVM) allow to detect when files have been accidentally or maliciously altered. This plugin puts IMA/EVM signatures in the *security.ima* extended file attribute during installation. This requires packages to contain the signatures - typically by being signed with **rpmsign --signfiles**.

## Configuration

The *%\_ima\_sign\_config\_files* macro controls whether signatures should also be written for config files.

See [**rpm-plugins**(8)](/man/rpm-plugins/8.md) on how to control plugins in general.

## SEE ALSO

[*evmctl*(1)](/man/evmctl/1.md) [*rpmsign*(8)](/man/rpmsign/8.md) [*rpm*(8)](/man/rpm/8.md)