Re: [PATCH v5 4/4] IMA: Handle early boot data measurement

On 2020-07-30 11:02:50, Lakshmi Ramasubramanian wrote: > On 7/29/20 8:47 PM, Lakshmi Ramasubramanian wrote: > > Hi Tyler, > > > diff --git a/security/integrity/ima/Kconfig b/security/integrity/ima/Kconfig > > index 080c53545ff0..86cba844f73c 100644 > > --- a/security/integrity/ima/Kconfig > > +++

Re: [PATCH v5 4/4] IMA: Handle early boot data measurement

On 7/29/20 8:47 PM, Lakshmi Ramasubramanian wrote: Hi Tyler, diff --git a/security/integrity/ima/Kconfig b/security/integrity/ima/Kconfig index 080c53545ff0..86cba844f73c 100644 --- a/security/integrity/ima/Kconfig +++ b/security/integrity/ima/Kconfig @@ -322,10 +322,9 @@ config IMA_MEASURE_ASY

[PATCH v5 4/4] IMA: Handle early boot data measurement

The current implementation of early boot measurement in the IMA subsystem is very specific to asymmetric keys. It does not handle measurement of other data such as Linux Security Module (LSM) data. Since most security modules are initialized very early in the boot cycle, data provided by those modu