CONFIG_IMA_WRITE_POLICY=y