Re: [PATCH v5 2/2] powerpc: Add support to initialize ima policy rules

2019-09-05 Thread Nayna
On 09/02/2019 07:52 AM, Michael Ellerman wrote: Hi Nayna, Hi Michael, Some more comments below. Nayna Jain writes: POWER secure boot relies on the kernel IMA security subsystem to perform the OS kernel image signature verification. Again this is just a design choice we've made, it's n

Re: [PATCH v5 2/2] powerpc: Add support to initialize ima policy rules

2019-09-02 Thread Michael Ellerman
Hi Nayna, Some more comments below. Nayna Jain writes: > POWER secure boot relies on the kernel IMA security subsystem to > perform the OS kernel image signature verification. Again this is just a design choice we've made, it's not specified anywhere or anything like that. And it only applies t

[PATCH v5 2/2] powerpc: Add support to initialize ima policy rules

2019-08-19 Thread Nayna Jain
POWER secure boot relies on the kernel IMA security subsystem to perform the OS kernel image signature verification. Since each secure boot mode has different IMA policy requirements, dynamic definition of the policy rules based on the runtime secure boot mode of the system is required. On systems