Messages in this thread | | | Date | Mon, 29 Aug 2022 17:45:18 -0400 | Subject | TPM: hibernate with IMA PCR 10 | From | Ken Goldman <> |
| |
On 5/4/2022 7:20 PM, Evan Green wrote: > Enabling the kernel to be able to do encryption and integrity checks on > the hibernate image prevents a malicious userspace from escalating to > kernel execution via hibernation resume. [snip]
I have a related question.
When a TPM powers up from hibernation, PCR 10 is reset. When a hibernate image is restored:
1. Is there a design for how PCR 10 is restored?
2. How are /sys/kernel/security/ima/[pseudofiles] saved and restored?
[unhandled content-type:application/pkcs7-signature] | |