]> git.baikalelectronics.ru Git - kernel.git/commit
ima: extend boot_aggregate with kernel measurements
authorMaurizio Drocco <maurizio.drocco@ibm.com>
Tue, 23 Jun 2020 15:57:32 +0000 (11:57 -0400)
committerMimi Zohar <zohar@linux.ibm.com>
Thu, 25 Jun 2020 00:47:24 +0000 (20:47 -0400)
commitc3ae483a1c49012921418164fbbc03c2aed73c3d
tree36dc25b12cddb87b4a200819375398cf5a3917a3
parente86d80f3f3da4d1072ca810bbe97a8ef4bd674b0
ima: extend boot_aggregate with kernel measurements

Registers 8-9 are used to store measurements of the kernel and its
command line (e.g., grub2 bootloader with tpm module enabled). IMA
should include them in the boot aggregate. Registers 8-9 should be
only included in non-SHA1 digests to avoid ambiguity.

Signed-off-by: Maurizio Drocco <maurizio.drocco@ibm.com>
Reviewed-by: Bruno Meneguele <bmeneg@redhat.com>
Tested-by: Bruno Meneguele <bmeneg@redhat.com> (TPM 1.2, TPM 2.0)
Signed-off-by: Mimi Zohar <zohar@linux.ibm.com>
security/integrity/ima/ima.h
security/integrity/ima/ima_crypto.c