[lkml]   [2009]   [Jun]   [6]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
Messages in this thread
SubjectRe: [IMA] 2.6.30-rc8 : Bug while trying to launch a KVM guest
Mimi Zohar wrote:
> This bug has been addressed in linux-next. Please refer to:
> f06dd16a03f6f7f72fab4db03be36e28c28c6fd6 : IMA: Handle dentry_open
> failures
> 1a62e958fa4aaeeb752311b4f5e16b2a86737b23 : IMA: open all files O_LARGEFILE
> 04288f42033607099cebf5ca15ce8dcec3a9688b : integrity: ima audit
> dentry_open failure
> The default policy in 2.6.30 measures all files open for read by root.
> (So starting the VM as root will cause it to be read.) This linux-next
> patch changes the default behavior so that nothing is measured.
> 5789ba3bd0a3cd20df5980ebf03358f2eb44fd67 : IMA: Minimal IMA policy and
> boot param for TCB IMA policy
I am able to boot the kvm guest after applying the following two patches.

commit f06dd16a03f6f7f72fab4db03be36e28c28c6fd6
commit 1a62e958fa4aaeeb752311b4f5e16b2a86737b23

Thanks Mimi for the help.



Sachin Sant
IBM Linux Technology Center
India Systems and Technology Labs
Bangalore, India

 \ /
  Last update: 2009-06-06 22:17    [W:0.040 / U:2.116 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site