Messages in this thread | | | Date | Tue, 5 Feb 2013 13:34:36 -0500 | From | Vivek Goyal <> | Subject | Re: [RFC 2/2] initramfs with digital signature protection |
| |
On Tue, Feb 05, 2013 at 06:19:26PM +0000, Matthew Garrett wrote: > On Tue, Feb 05, 2013 at 02:34:50PM +0200, Dmitry Kasatkin wrote: > > > Digitally signed initramfs can be used to provide protected user-space > > environment for initialization purpose. For example, LSM, IMA/EVM can be > > securely initialized using such approach. > > What stops an attacker from simply removing the signed image from the > initramfs and running modified versions of the same tools from the > unsigned image?
Looks like having signed initramfs image is mandatory otherwise system panics.
+ if (sys_access(initramfs_img, 0)) + panic("signed initramfs image not found (INITRAMFS_SIG is +anabled)\n");
Also I am assuming that from signed initramfs, keys will be loaded in appropriate keyrings and then keyring will be locked so that any tools from unsigned initramfs can not load additional keys.
Thanks Vivek
| |