Messages in this thread | | | Subject | Re: [PATCH 00/23] Crypto keys and module signing | From | Mimi Zohar <> | Date | Fri, 25 May 2012 09:08:14 -0400 |
| |
On Fri, 2012-05-25 at 12:37 +0100, David Howells wrote: > Kasatkin, Dmitry <dmitry.kasatkin@intel.com> wrote: > > > > In some ways that is cleaner, but it's also nice to avoid adding another > > > syscall. > > > > There is no additional syscall. > > signature is passed is 'ima=' parameter to init_module() > > like > > Exactly what I was thinking of, though I wouldn't call it "ima=" as that > doesn't seem specific enough.
IMA-appraisal maintains the file integrity metadata.
> You could also append it to the binary image and have the kernel extract it > from there as if the module file had had the signature attached during the > build. > > I don't particularly favour holding the signature in an xattr, though, as that > assumes that underlying fs has the capability to hold it and means that the > package installation mechanism must know how to fill in xattrs.
Labeling files for integrity is a general issue, not limited to kernel modules/ELF files. For this reason, we need a generic mechanism that works for all files, not only those that are executables. For local files, such as configuration files, which are system specific, files are labeled with hashes(IMA-appraisal) and HMAC(EVM).
Yes, the package update mechanisms will need to be modified to install both the file data and the associated file metadata - hash, signature. Tar supports xattrs. The original CPIO format doesn't, but there are extensions that do.
The issue here is whether we want the integrity metadata for kernel modules to be stored differently than for all other files.
Mimi
| |