Re: [Linux-ima-user] Initramfs and IMA Appraisal

2014-12-29 Thread Rob Landley
On 12/29/2014 09:20 PM, Mimi Zohar wrote: > On Mon, 2014-12-29 at 19:55 -0600, Rob Landley wrote: >>> Thanks Rob for the explanation. The problem is that ramfs does not >>> support extended attributes, while tmpfs does. >> >> If you're _using_ initramfs/initmpfs, there's no reason to specify a ro

Re: [Linux-ima-user] Initramfs and IMA Appraisal

2014-12-29 Thread Mimi Zohar
On Mon, 2014-12-29 at 19:55 -0600, Rob Landley wrote: > > On 12/29/2014 03:46 PM, Mimi Zohar wrote: > > On Mon, 2014-12-29 at 14:34 -0600, Rob Landley wrote: > >> On 12/29/2014 07:45 AM, Mimi Zohar wrote: > >>> On Thu, 2014-11-27 at 10:15 +0100, Christophe Fillot wrote: > > > > Are you u

Re: [Linux-ima-user] Initramfs and IMA Appraisal

2014-12-29 Thread Mimi Zohar
On Mon, 2014-12-29 at 18:25 -0800, David Lang wrote: > On Mon, 29 Dec 2014, Mimi Zohar wrote: > > > Thanks Rob for the explanation. The problem is that ramfs does not > > support extended attributes, while tmpfs does. The boot loader could > > "measure" (trusted boot) the initramfs, but as the

Re: [Linux-ima-user] Initramfs and IMA Appraisal

2014-12-29 Thread David Lang
On Mon, 29 Dec 2014, Mimi Zohar wrote: Thanks Rob for the explanation. The problem is that ramfs does not support extended attributes, while tmpfs does. The boot loader could "measure" (trusted boot) the initramfs, but as the initramfs is generated on the target system, the initramfs is not si

Re: [Linux-ima-user] Initramfs and IMA Appraisal

2014-12-29 Thread Rob Landley
On 12/29/2014 03:46 PM, Mimi Zohar wrote: > On Mon, 2014-12-29 at 14:34 -0600, Rob Landley wrote: >> On 12/29/2014 07:45 AM, Mimi Zohar wrote: >>> On Thu, 2014-11-27 at 10:15 +0100, Christophe Fillot wrote: > > Are you using an initrd not an initramfs? According to > Documentation/f

Re: [Linux-ima-user] Initramfs and IMA Appraisal

2014-12-29 Thread Mimi Zohar
On Mon, 2014-12-29 at 14:34 -0600, Rob Landley wrote: > On 12/29/2014 07:45 AM, Mimi Zohar wrote: > > On Thu, 2014-11-27 at 10:15 +0100, Christophe Fillot wrote: > >>> > >>> Are you using an initrd not an initramfs? According to > >>> Documentation/filesystems/ramfs-rootfs-initramfs.txt, "If > >>

Re: [Linux-ima-user] Initramfs and IMA Appraisal

2014-12-29 Thread Rob Landley
On 12/29/2014 07:45 AM, Mimi Zohar wrote: > On Thu, 2014-11-27 at 10:15 +0100, Christophe Fillot wrote: >>> >>> Are you using an initrd not an initramfs? According to >>> Documentation/filesystems/ramfs-rootfs-initramfs.txt, "If >> CONFIG_TMPFS >>> is enabled, rootfs will use tmpfs instead of ramf

Re: [Linux-ima-user] Initramfs and IMA Appraisal

2014-12-29 Thread Mimi Zohar
On Thu, 2014-11-27 at 10:15 +0100, Christophe Fillot wrote: > > > > Are you using an initrd not an initramfs? According to > > Documentation/filesystems/ramfs-rootfs-initramfs.txt, "If > CONFIG_TMPFS > > is enabled, rootfs will use tmpfs instead of ramfs by default". > > > Yes, that what I thought