[lkml]   [2012]   [May]   [25]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
Messages in this thread
    SubjectRe: [PATCH 00/23] Crypto keys and module signing
    On Fri, 2012-05-25 at 12:37 +0100, David Howells wrote:
    > Kasatkin, Dmitry <> wrote:
    > > > In some ways that is cleaner, but it's also nice to avoid adding another
    > > > syscall.
    > >
    > > There is no additional syscall.
    > > signature is passed is 'ima=' parameter to init_module()
    > > like
    > Exactly what I was thinking of, though I wouldn't call it "ima=" as that
    > doesn't seem specific enough.

    IMA-appraisal maintains the file integrity metadata.

    > You could also append it to the binary image and have the kernel extract it
    > from there as if the module file had had the signature attached during the
    > build.
    > I don't particularly favour holding the signature in an xattr, though, as that
    > assumes that underlying fs has the capability to hold it and means that the
    > package installation mechanism must know how to fill in xattrs.

    Labeling files for integrity is a general issue, not limited to kernel
    modules/ELF files. For this reason, we need a generic mechanism that
    works for all files, not only those that are executables. For local
    files, such as configuration files, which are system specific, files are
    labeled with hashes(IMA-appraisal) and HMAC(EVM).

    Yes, the package update mechanisms will need to be modified to install
    both the file data and the associated file metadata - hash, signature.
    Tar supports xattrs. The original CPIO format doesn't, but there are
    extensions that do.

    The issue here is whether we want the integrity metadata for kernel
    modules to be stored differently than for all other files.


     \ /
      Last update: 2012-05-25 16:41    [W:0.024 / U:9.100 seconds]
    ©2003-2016 Jasper Spaans. hosted at Digital OceanAdvertise on this site