lkml.org 
[lkml]   [2022]   [Aug]   [29]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
    /
    Date
    SubjectTPM: hibernate with IMA PCR 10
    From
    On 5/4/2022 7:20 PM, Evan Green wrote:
    > Enabling the kernel to be able to do encryption and integrity checks on
    > the hibernate image prevents a malicious userspace from escalating to
    > kernel execution via hibernation resume. [snip]

    I have a related question.

    When a TPM powers up from hibernation, PCR 10 is reset. When a
    hibernate image is restored:

    1. Is there a design for how PCR 10 is restored?

    2. How are /sys/kernel/security/ima/[pseudofiles] saved and
    restored?

    [unhandled content-type:application/pkcs7-signature]
    \
     
     \ /
      Last update: 2022-08-29 23:46    [W:8.420 / U:0.188 seconds]
    ©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site