Re: [PATCHv3 3/6] evm: enable EVM when X509 certificate is loaded

2015-10-26 Thread Dmitry Kasatkin
Hi, I added error printing to the patch http://git.kernel.org/cgit/linux/kernel/git/kasatkin/linux-digsig.git/log/?h=ima-next Dmitry On Fri, Oct 23, 2015 at 9:31 PM, Mimi Zohar wrote: > On Thu, 2015-10-22 at 21:49 +0300, Dmitry Kasatkin wrote: >> In order to enable EVM before starting 'init'

Re: [PATCHv3 3/6] evm: enable EVM when X509 certificate is loaded

2015-10-26 Thread Dmitry Kasatkin
Hi, I added error printing to the patch http://git.kernel.org/cgit/linux/kernel/git/kasatkin/linux-digsig.git/log/?h=ima-next Dmitry On Fri, Oct 23, 2015 at 9:31 PM, Mimi Zohar wrote: > On Thu, 2015-10-22 at 21:49 +0300, Dmitry Kasatkin wrote: >> In order to enable

Re: [PATCHv3 3/6] evm: enable EVM when X509 certificate is loaded

2015-10-23 Thread Mimi Zohar
On Thu, 2015-10-22 at 21:49 +0300, Dmitry Kasatkin wrote: > In order to enable EVM before starting 'init' process, > evm_initialized needs to be non-zero. Before it was > indicating that HMAC key is loaded. When EVM loads > X509 before calling 'init', it is possible to enable > EVM to start

Re: [PATCHv3 3/6] evm: enable EVM when X509 certificate is loaded

2015-10-23 Thread Mimi Zohar
On Thu, 2015-10-22 at 21:49 +0300, Dmitry Kasatkin wrote: > In order to enable EVM before starting 'init' process, > evm_initialized needs to be non-zero. Before it was > indicating that HMAC key is loaded. When EVM loads > X509 before calling 'init', it is possible to enable > EVM to start

[PATCHv3 3/6] evm: enable EVM when X509 certificate is loaded

2015-10-22 Thread Dmitry Kasatkin
In order to enable EVM before starting 'init' process, evm_initialized needs to be non-zero. Before it was indicating that HMAC key is loaded. When EVM loads X509 before calling 'init', it is possible to enable EVM to start signature based verification. This patch defines bits to enable EVM if

[PATCHv3 3/6] evm: enable EVM when X509 certificate is loaded

2015-10-22 Thread Dmitry Kasatkin
In order to enable EVM before starting 'init' process, evm_initialized needs to be non-zero. Before it was indicating that HMAC key is loaded. When EVM loads X509 before calling 'init', it is possible to enable EVM to start signature based verification. This patch defines bits to enable EVM if