Re: [PATCH v5 4/4] IMA: Handle early boot data measurement

2020-07-30 Thread Tyler Hicks
On 2020-07-30 11:02:50, Lakshmi Ramasubramanian wrote: > On 7/29/20 8:47 PM, Lakshmi Ramasubramanian wrote: > > Hi Tyler, > > > diff --git a/security/integrity/ima/Kconfig b/security/integrity/ima/Kconfig > > index 080c53545ff0..86cba844f73c 100644 > > --- a/security/integrity/ima/Kconfig > >

Re: [PATCH v5 4/4] IMA: Handle early boot data measurement

2020-07-30 Thread Lakshmi Ramasubramanian
On 7/29/20 8:47 PM, Lakshmi Ramasubramanian wrote: Hi Tyler, diff --git a/security/integrity/ima/Kconfig b/security/integrity/ima/Kconfig index 080c53545ff0..86cba844f73c 100644 --- a/security/integrity/ima/Kconfig +++ b/security/integrity/ima/Kconfig @@ -322,10 +322,9 @@ config

[PATCH v5 4/4] IMA: Handle early boot data measurement

2020-07-29 Thread Lakshmi Ramasubramanian
The current implementation of early boot measurement in the IMA subsystem is very specific to asymmetric keys. It does not handle measurement of other data such as Linux Security Module (LSM) data. Since most security modules are initialized very early in the boot cycle, data provided by those