Re: [PATCH 2/3] IMA:Define a new template field buf

On Wed, 2019-06-19 at 11:08 -0700, prakhar srivastava wrote: > > > > if (iint->measured_pcrs & (0x1 << pcr)) > > > diff --git a/security/integrity/ima/ima_init.c > > > b/security/integrity/ima/ima_init.c > > > index 993d0f1915ff..c8591406c0e2 100644 > > > --- a/security/integrity/ima/ima_in

Re: [PATCH 2/3] IMA:Define a new template field buf

> > if (iint->measured_pcrs & (0x1 << pcr)) > > diff --git a/security/integrity/ima/ima_init.c > > b/security/integrity/ima/ima_init.c > > index 993d0f1915ff..c8591406c0e2 100644 > > --- a/security/integrity/ima/ima_init.c > > +++ b/security/integrity/ima/ima_init.c > > @@ -50,7 +50,7 @@ st

Re: [PATCH 2/3] IMA:Define a new template field buf

On Mon, 2019-06-17 at 11:35 -0700, Prakhar Srivastava wrote: > A buffer(kexec boot command line arguments) measured into IMA > measuremnt list cannot be appraised, without already being > aware of the buffer contents. Since hashes are non-reversible, > raw buffer is needed for validation or regener

[PATCH 2/3] IMA:Define a new template field buf

A buffer(kexec boot command line arguments) measured into IMA measuremnt list cannot be appraised, without already being aware of the buffer contents. Since hashes are non-reversible, raw buffer is needed for validation or regenerating hash for appraisal/attestation. Add support to store/read the