From: Mimi Zohar <zohar@linux.ibm.com>
To: linux-integrity@vger.kernel.org
Cc: Mimi Zohar <zohar@linux.ibm.com>, Petr Vorel <pvorel@suse.cz>,
Bruno Meneguele <bmeneg@redhat.com>
Subject: [PATCH v2 0/8] additional "ima-measurement" support
Date: Fri, 10 Jul 2020 12:00:51 -0400 [thread overview]
Message-ID: <1594396859-9232-1-git-send-email-zohar@linux.ibm.com> (raw)
"evmctl ima_measurement" walks the IMA measurement list re-calculating
the TPM PCR banks.
- Support the original method of extending the TPM 2.0 banks with the
padded SHA1 digest.
- Instead of reading the hardware or software TPM PCRs, support
providing the TPM 1.2 PCRs as a file.
- Limit the number of messages being emitted while verifying the
measurement list.
- Reading the TPM PCRs before walking the measurement list guarantees
the measurement list contains all the records, maybe too many.
- Rename "--list" to "--verify-sig", and update the README.
Changelog v2:
- limit number of messages
- read PCRs before walking the measurement list
- and other miscellaneous cleanup
Mimi Zohar (8):
ima-evm-utils: improve reading TPM 1.2 PCRs
ima_evm_utils: support extending TPM 2.0 banks w/original SHA1 padded
digest
ima-evm-utils: support providing the TPM 1.2 PCRs as a file
ima-evm-utils: emit "ima_measurement" messages based on log level
ima-evm-utils: guarantee the measurement list contains all the records
ima-evm-utils: the IMA measurement list may have too many measurements
ima-evm-utils: optionally verify the template data file signature
ima-evm-utils: update README to reflect "--pcrs", "--verify" and
"--validate"
README | 6 ++-
src/evmctl.c | 172 +++++++++++++++++++++++++++++++++++++++++++----------------
2 files changed, 132 insertions(+), 46 deletions(-)
--
2.7.5
next reply other threads:[~2020-07-10 16:01 UTC|newest]
Thread overview: 13+ messages / expand[flat|nested] mbox.gz Atom feed top
2020-07-10 16:00 Mimi Zohar [this message]
2020-07-10 16:00 ` [PATCH v2 1/8] ima-evm-utils: improve reading TPM 1.2 PCRs Mimi Zohar
2020-07-10 16:00 ` [PATCH v2 2/8] ima_evm_utils: support extending TPM 2.0 banks w/original SHA1 padded digest Mimi Zohar
2020-07-15 18:43 ` Bruno Meneguele
2020-07-15 19:47 ` Mimi Zohar
2020-07-15 20:11 ` Mimi Zohar
2020-07-15 20:17 ` Bruno Meneguele
2020-07-10 16:00 ` [PATCH v2 3/8] ima-evm-utils: support providing the TPM 1.2 PCRs as a file Mimi Zohar
2020-07-10 16:00 ` [PATCH v2 4/8] ima-evm-utils: emit "ima_measurement" messages based on log level Mimi Zohar
2020-07-10 16:00 ` [PATCH v2 5/8] ima-evm-utils: guarantee the measurement list contains all the records Mimi Zohar
2020-07-10 16:00 ` [PATCH v2 6/8] ima-evm-utils: the IMA measurement list may have too many measurements Mimi Zohar
2020-07-10 16:00 ` [PATCH v2 7/8] ima-evm-utils: optionally verify the template data file signature Mimi Zohar
2020-07-10 16:00 ` [PATCH v2 8/8] ima-evm-utils: update README to reflect "--pcrs", "--verify" and "--validate" Mimi Zohar
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=1594396859-9232-1-git-send-email-zohar@linux.ibm.com \
--to=zohar@linux.ibm.com \
--cc=bmeneg@redhat.com \
--cc=linux-integrity@vger.kernel.org \
--cc=pvorel@suse.cz \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.