Re: [PATCH v12 00/11] Appended signatures support for IMA appraisal

2019-08-28 Thread Mimi Zohar
Hi Jordan, On Mon, 2019-08-26 at 15:46 -0700, Jordan Hand wrote: > On 6/27/19 7:19 PM, Thiago Jung Bauermann wrote: > > On the OpenPOWER platform, secure boot and trusted boot are being > > implemented using IMA for taking measurements and verifying signatures. > > Since the kernel image on Power

Re: [PATCH v12 00/11] Appended signatures support for IMA appraisal

2019-08-26 Thread Thiago Jung Bauermann
Hello Jordan, Jordan Hand writes: > On 6/27/19 7:19 PM, Thiago Jung Bauermann wrote: >> On the OpenPOWER platform, secure boot and trusted boot are being >> implemented using IMA for taking measurements and verifying signatures. >> Since the kernel image on Power servers is an ELF binary, kern

Re: [PATCH v12 00/11] Appended signatures support for IMA appraisal

2019-08-26 Thread Jordan Hand
On 6/27/19 7:19 PM, Thiago Jung Bauermann wrote: > On the OpenPOWER platform, secure boot and trusted boot are being > implemented using IMA for taking measurements and verifying signatures. > Since the kernel image on Power servers is an ELF binary, kernels are > signed using the scripts/sign-file

Re: [PATCH v12 00/11] Appended signatures support for IMA appraisal

2019-07-03 Thread Thiago Jung Bauermann
Mimi Zohar writes: > On Thu, 2019-06-27 at 23:19 -0300, Thiago Jung Bauermann wrote: >> Hello, >> >> This version is essentially identical to the last one. >> >> It is only a rebase on top of today's linux-integrity/next-queued-testing, >> prompted by conflicts with Prakhar Srivastava's patch

Re: [PATCH v12 00/11] Appended signatures support for IMA appraisal

2019-07-01 Thread Mimi Zohar
On Thu, 2019-06-27 at 23:19 -0300, Thiago Jung Bauermann wrote: > Hello, > > This version is essentially identical to the last one. > > It is only a rebase on top of today's linux-integrity/next-queued-testing, > prompted by conflicts with Prakhar Srivastava's patches to measure the > kernel comm

[PATCH v12 00/11] Appended signatures support for IMA appraisal

2019-06-27 Thread Thiago Jung Bauermann
Hello, This version is essentially identical to the last one. It is only a rebase on top of today's linux-integrity/next-queued-testing, prompted by conflicts with Prakhar Srivastava's patches to measure the kernel command line. It also drops two patches that are already present in that branch.