Re: [PATCH v5 1/4] IMA: Add func to measure LSM state and policy

2020-07-30 Thread Lakshmi Ramasubramanian
On 7/30/20 9:19 AM, Casey Schaufler wrote: Critical data structures of security modules need to be measured to enable an attestation service to verify if the configuration and policies for the security modules have been setup correctly and that they haven't been tampered with at runtime. A new

Re: [PATCH v5 1/4] IMA: Add func to measure LSM state and policy

2020-07-30 Thread Casey Schaufler
On 7/30/2020 8:02 AM, Tyler Hicks wrote: > On 2020-07-29 20:47:21, Lakshmi Ramasubramanian wrote: >> Critical data structures of security modules need to be measured to >> enable an attestation service to verify if the configuration and >> policies for the security modules have been setup

Re: [PATCH v5 1/4] IMA: Add func to measure LSM state and policy

2020-07-30 Thread Tyler Hicks
On 2020-07-30 08:15:34, Lakshmi Ramasubramanian wrote: > On 7/30/20 8:02 AM, Tyler Hicks wrote: > > > > diff --git a/security/integrity/ima/ima_policy.c > > > b/security/integrity/ima/ima_policy.c > > > index 07f033634b27..a0f5c39d9084 100644 > > > --- a/security/integrity/ima/ima_policy.c > > >

Re: [PATCH v5 1/4] IMA: Add func to measure LSM state and policy

2020-07-30 Thread Lakshmi Ramasubramanian
On 7/30/20 8:02 AM, Tyler Hicks wrote: diff --git a/security/integrity/ima/ima_policy.c b/security/integrity/ima/ima_policy.c index 07f033634b27..a0f5c39d9084 100644 --- a/security/integrity/ima/ima_policy.c +++ b/security/integrity/ima/ima_policy.c @@ -442,13 +442,20 @@ static bool

Re: [PATCH v5 1/4] IMA: Add func to measure LSM state and policy

2020-07-30 Thread Tyler Hicks
On 2020-07-29 20:47:21, Lakshmi Ramasubramanian wrote: > Critical data structures of security modules need to be measured to > enable an attestation service to verify if the configuration and > policies for the security modules have been setup correctly and > that they haven't been tampered with

[PATCH v5 1/4] IMA: Add func to measure LSM state and policy

2020-07-29 Thread Lakshmi Ramasubramanian
Critical data structures of security modules need to be measured to enable an attestation service to verify if the configuration and policies for the security modules have been setup correctly and that they haven't been tampered with at runtime. A new IMA policy is required for handling this