kernelconfig_penguin

Enable reading back the current IMA policy

configname: CONFIG_IMA_READ_POLICY

Linux Kernel Configuration
└─> Security options
└─> Enable reading back the current IMA policy

In linux kernel since version 4.1 (release Date: 2015-06-21)  

It is often useful to be able to read back the IMA policy. It is
even more important after introducing CONFIG_IMA_WRITE_POLICY.
This option allows the root user to see the current policy rules.