lkml.org 
[lkml]   [2016]   [Jun]   [22]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
From
Subject[PATCH 0/3] support other types of measurements
Date
In addition to file measurements, other types of measurements should be
included in the IMA measurement list to attest to the integrity of the
running system. This patch set introduces two new types of measurements -
buffer and pre-calculated digests.

The first, for example, can be used to measure the kexec boot command
line, while the latter could be used for including asymmetric key id
information.

Mimi Zohar (3):
ima: measure other types of data
kexec: measure boot command line
ima: add pre-calculated measurements (experimental)

Documentation/ABI/testing/ima_policy | 1 +
include/linux/ima.h | 24 +++++
kernel/kexec_file.c | 4 +
security/integrity/ima/Kconfig | 8 ++
security/integrity/ima/Makefile | 2 +-
security/integrity/ima/ima.h | 4 +
security/integrity/ima/ima_buffer.c | 164 +++++++++++++++++++++++++++++++++++
security/integrity/ima/ima_policy.c | 51 ++++++++++-
8 files changed, 255 insertions(+), 3 deletions(-)
create mode 100644 security/integrity/ima/ima_buffer.c
--
2.1.0

\
 
 \ /
  Last update: 2016-06-22 16:01    [W:0.052 / U:0.048 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site