Re: [PATCH v2] IMA: Measure kernel version in early boot

2021-01-24 Thread Mimi Zohar
On Fri, 2021-01-22 at 15:28 -0800, Raphael Gianotti wrote: > The integrity of a kernel can be verified by the boot loader on cold > boot, and during kexec, by the current running kernel, before it is > loaded. However, it is still possible that the new kernel being > loaded is older than the curren

[PATCH v2] IMA: Measure kernel version in early boot

2021-01-22 Thread Raphael Gianotti
The integrity of a kernel can be verified by the boot loader on cold boot, and during kexec, by the current running kernel, before it is loaded. However, it is still possible that the new kernel being loaded is older than the current kernel, and/or has known vulnerabilities. Therefore, it is impera