When both IMA and EVM fix modes are enabled, accessing a file with IMA signature but missing EVM HMAC won't trigger security.evm to be fixed.
Review and test v2 patch set from Coiby: evm: fix security.evm for a file with IMA signature
https://lore.kernel.org/linux-integrity/20250930022658.4033410-1-coxu@redhat.com/
Replacement for v1: ima: setting security.ima to fix security.evm for a file with IMA signature
https://lore.kernel.org/linux-integrity/20250909041954.1626914-1-coxu@redhat.com/