Re: [PATCH v2 4/5] selftests/ima: kexec_file_load syscall test

On Mon, 2019-03-11 at 09:34 +0100, Petr Vorel wrote: > Hi Mimi, > > > On Thu, 2019-02-28 at 23:00 +0100, Petr Vorel wrote: > > > > > + local keypair1="$2" > > > > + local keypair2="$3" > > > > + > > > > + mount_securityfs > > > > + > > > > + local ima_policy=$SECURITYFS/im

Re: [PATCH v2 4/5] selftests/ima: kexec_file_load syscall test

Hi Mimi, > On Thu, 2019-02-28 at 23:00 +0100, Petr Vorel wrote: > > > + local keypair1="$2" > > > + local keypair2="$3" > > > + > > > + mount_securityfs > > > + > > > + local ima_policy=$SECURITYFS/ima/policy > > > + if [ ! -e $ima_policy ]; then > > > + log_fail "$ima_policy not found" >

Re: [PATCH v2 4/5] selftests/ima: kexec_file_load syscall test

On Thu, 2019-02-28 at 23:00 +0100, Petr Vorel wrote: > > + local keypair1="$2" > > + local keypair2="$3" > > + > > + mount_securityfs > > + > > + local ima_policy=$SECURITYFS/ima/policy > > + if [ ! -e $ima_policy ]; then > > + log_fail "$ima_policy not found" > > + fi > > +

Re: [PATCH v2 4/5] selftests/ima: kexec_file_load syscall test

Hi Mimi, > The kernel can be configured to verify PE signed kernel images, IMA > kernel image signatures, both types of signatures, or none. This test > verifies only properly signed kernel images are loaded into memory, > based on the kernel configuration and runtime policies. > Signed-off-by:

Re: [PATCH v2 4/5] selftests/ima: kexec_file_load syscall test

Hi Mimi, > The kernel can be configured to verify PE signed kernel images, IMA > kernel image signatures, both types of signatures, or none. This test > verifies only properly signed kernel images are loaded into memory, > based on the kernel configuration and runtime policies. > Signed-off-by:

Re: [PATCH v2 4/5] selftests/ima: kexec_file_load syscall test

On 2/26/19 4:26 PM, Mimi Zohar wrote: The kernel can be configured to verify PE signed kernel images, IMA kernel image signatures, both types of signatures, or none. This test verifies only properly signed kernel images are loaded into memory, based on the kernel configuration and runtime polici

[PATCH v2 4/5] selftests/ima: kexec_file_load syscall test

The kernel can be configured to verify PE signed kernel images, IMA kernel image signatures, both types of signatures, or none. This test verifies only properly signed kernel images are loaded into memory, based on the kernel configuration and runtime policies. Signed-off-by: Mimi Zohar --- too