Re: [PATCH v3] IMA: Measure kernel version in early boot

2021-01-26 Thread Mimi Zohar
On Mon, 2021-01-25 at 16:50 -0800, Raphael Gianotti wrote: > The integrity of a kernel can be verified by the boot loader on cold > boot, and during kexec, by the current running kernel, before it is > loaded. However, it is still possible that the new kernel being > loaded is older than the

[PATCH v3] IMA: Measure kernel version in early boot

2021-01-26 Thread Raphael Gianotti
The integrity of a kernel can be verified by the boot loader on cold boot, and during kexec, by the current running kernel, before it is loaded. However, it is still possible that the new kernel being loaded is older than the current kernel, and/or has known vulnerabilities. Therefore, it is