lkml.org 
[lkml]   [2019]   [May]   [15]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
SubjectRe: [PATCH 0/2] public key: IMA signer logging: Log public key of IMA Signature signer in IMA log
From
Date
Hi Mimi,

I would like to make sure I understood your feedback.

>
> Why duplicate the certificate info on each record in the measurement
> list?  Why not add the certificate info once, as the key is loaded
> onto the .ima and .platform keyrings?
>
> Mimi
>

key_create_or_update function in security/keys/key.c is called to
add\update a key to a keyring. Are you suggesting that an IMA function
be called from here to add the certificate info to the IMA log?

Our requirement is that the key information is available in the IMA log
which is TPM backed.

Thanks,
-lakshmi

\
 
 \ /
  Last update: 2019-05-15 20:18    [W:0.096 / U:34.688 seconds]
©2003-2018 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site