Re: [PATCH] kexec_buffer measure

2019-05-03 Thread Mimi Zohar
On Fri, 2019-05-03 at 09:53 +0900, Tetsuo Handa wrote: > On 2019/05/03 1:28, Casey Schaufler wrote: > > On 5/2/2019 8:48 AM, Mimi Zohar wrote: > >> [Cc'ing Paul, John, Casey] > >> > >> On Mon, 2019-04-22 at 20:18 -0400, Mimi Zohar wrote: > >>> [Cc'ing LSM mailing list] > >>> > >>> On Fri,

Re: [PATCH] kexec_buffer measure

2019-05-02 Thread Tetsuo Handa
On 2019/05/03 1:28, Casey Schaufler wrote: > On 5/2/2019 8:48 AM, Mimi Zohar wrote: >> [Cc'ing Paul, John, Casey] >> >> On Mon, 2019-04-22 at 20:18 -0400, Mimi Zohar wrote: >>> [Cc'ing LSM mailing list] >>> >>> On Fri, 2019-04-19 at 17:30 -0700, prakhar srivastava wrote: >>> 2) Adding a LSM

Re: [PATCH] kexec_buffer measure

2019-05-02 Thread Casey Schaufler
On 5/2/2019 8:48 AM, Mimi Zohar wrote: [Cc'ing Paul, John, Casey] On Mon, 2019-04-22 at 20:18 -0400, Mimi Zohar wrote: [Cc'ing LSM mailing list] On Fri, 2019-04-19 at 17:30 -0700, prakhar srivastava wrote: 2) Adding a LSM hook We are doing both the command line and kernel version

Re: [PATCH] kexec_buffer measure

2019-05-02 Thread Casey Schaufler
On 5/2/2019 8:48 AM, Mimi Zohar wrote: [Cc'ing Paul, John, Casey] On Mon, 2019-04-22 at 20:18 -0400, Mimi Zohar wrote: [Cc'ing LSM mailing list] On Fri, 2019-04-19 at 17:30 -0700, prakhar srivastava wrote: 2) Adding a LSM hook We are doing both the command line and kernel version

Re: [PATCH] kexec_buffer measure

2019-05-02 Thread Mimi Zohar
[Cc'ing Paul, John, Casey] On Mon, 2019-04-22 at 20:18 -0400, Mimi Zohar wrote: > [Cc'ing LSM mailing list] > > On Fri, 2019-04-19 at 17:30 -0700, prakhar srivastava wrote: > > > 2) Adding a LSM hook > > We are doing both the command line and kernel version measurement in IMA. > > Can you

Re: [PATCH] kexec_buffer measure

2019-04-22 Thread Mimi Zohar
[Cc'ing LSM mailing list] On Fri, 2019-04-19 at 17:30 -0700, prakhar srivastava wrote: > 2) Adding a LSM hook > We are doing both the command line and kernel version measurement in IMA. > Can you please elaborate on how this can be used outside of the scenario? > That will help me come back with

Re: [PATCH] kexec_buffer measure

2019-04-19 Thread prakhar srivastava
Currently for soft reboot(kexec_file_load) the kernel file and signature is measured by IMA. The cmdline args used to load the kernel is not measured. The boot aggregate that gets calculated will have no change since the EFI loader has not been triggered. Adding the kexec cmdline args measure and