------- Comment From naynj...@ibm.com 2020-04-10 16:15 EDT-------
The upstream patch has an additional fix but it?s not critical for GA. It can
get included as part of bug fixes. It also affects only power. The
patch("powerpc/ima: fix secure boot rules in ima arch policy") is posted to
linux-integrity and linuxppc-dev mailing list
(https://lore.kernel.org/linux-integrity/1586549618-6106-1-git-send-email-na...@linux.ibm.com/T/#u)
If there are any issues identified during further testing, they will get
opened as separate issue to be addressed later.
Thanks & Regards,
- Nayna
--
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.
https://bugs.launchpad.net/bugs/1866909
Title:
Ubuntu Kernel Support for OpenPOWER NV Secure & Trusted Boot
Status in The Ubuntu-power-systems project:
Fix Committed
Status in linux package in Ubuntu:
Fix Committed
Bug description:
== Comment: #0 - George C. Wilson <gcwil...@us.ibm.com> - 2020-02-25 18:40:44
==
- sysfs enablement: TBD
- ima: arch specific policy support 6191706246de
- platform keyring changes for powerpc: TBD
- Appended signatures support for IMA appraisal
39b07096364a42c516415d5f841069e885234e61
- integrity: Define a trusted platform keyring: 9dc92c45177a
- ima: Support platform keyring for kernel appraisal: d7cecb676dd3
- TPM 2.0 Multibank extend support: c1f92b4b04ad
- TPM 2.0 Eventlog support: 4d23cc323cdb
- ima: carry the measurement list across kexec: d68a6fe9fccf
- kexec_file_load system call support: 500c7ab1a9db
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu-power-systems/+bug/1866909/+subscriptions
--
Mailing list: https://launchpad.net/~kernel-packages
Post to : kernel-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~kernel-packages
More help : https://help.launchpad.net/ListHelp
