In meta-secure-core/meta-integrity/recipes-devtools/rpm/rpm-integrity.inc the PACKAGECONFIG contents get overwritten by the following assignment: PACKAGECONFIG = "${@bb.utils.contains('DISTRO_FEATURES', 'ima', 'imaevm', '', d)}"