Messages in this thread | | | Date | Wed, 29 Jan 2020 09:30:34 +0100 | From | Petr Vorel <> | Subject | Re: [PATCH 1/2] ima: use the IMA configured hash algo to calculate the boot aggregate |
| |
Hi Mimi,
Reviewed-by: Petr Vorel <pvorel@suse.cz>
> The original LTP ima_boot_aggregate.c test needed to be updated to > support TPM 2.0 before this change. For TPM 2.0, the PCRs are not > exported. With this change, the kernel could be reading PCRs from a > TPM bank other than SHA1 and calculating the boot_aggregate based on a > different hash algorithm as well. I'm not sure how a remote verifier > would know which TPM bank was read, when calculating the boot- > aggregate. Mimi, do you plan to do update LTP test?
Kind regards, Petr
| |