From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org X-Spam-Level: X-Spam-Status: No, score=-7.5 required=3.0 tests=BAYES_00,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,HEADER_FROM_DIFFERENT_DOMAINS,MAILING_LIST_MULTI, NICE_REPLY_A,SPF_HELO_NONE,SPF_PASS,URIBL_BLOCKED,USER_AGENT_SANE_1 autolearn=no autolearn_force=no version=3.4.0 Received: from mail.kernel.org (mail.kernel.org [198.145.29.99]) by smtp.lore.kernel.org (Postfix) with ESMTP id E2F92C4363A for ; Tue, 27 Oct 2020 18:57:27 +0000 (UTC) Received: from vger.kernel.org (vger.kernel.org [23.128.96.18]) by mail.kernel.org (Postfix) with ESMTP id 0952C20878 for ; Tue, 27 Oct 2020 18:57:26 +0000 (UTC) Authentication-Results: mail.kernel.org; dkim=pass (2048-bit key) header.d=rosalinux.ru header.i=@rosalinux.ru header.b="Wu1KHJ8h" Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S371300AbgJ0S50 (ORCPT ); Tue, 27 Oct 2020 14:57:26 -0400 Received: from mail.rosalinux.ru ([195.19.76.54]:35748 "EHLO mail.rosalinux.ru" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S371299AbgJ0S5Z (ORCPT ); Tue, 27 Oct 2020 14:57:25 -0400 X-Greylist: delayed 327 seconds by postgrey-1.27 at vger.kernel.org; Tue, 27 Oct 2020 14:57:24 EDT Received: from localhost (localhost [127.0.0.1]) by mail.rosalinux.ru (Postfix) with ESMTP id C735DDC8993D8; Tue, 27 Oct 2020 21:57:22 +0300 (MSK) Received: from mail.rosalinux.ru ([127.0.0.1]) by localhost (mail.rosalinux.ru [127.0.0.1]) (amavisd-new, port 10032) with ESMTP id iTeuNSPj9jIP; Tue, 27 Oct 2020 21:57:22 +0300 (MSK) Received: from localhost (localhost [127.0.0.1]) by mail.rosalinux.ru (Postfix) with ESMTP id 475E3DC8993DA; Tue, 27 Oct 2020 21:57:22 +0300 (MSK) DKIM-Filter: OpenDKIM Filter v2.10.3 mail.rosalinux.ru 475E3DC8993DA DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=rosalinux.ru; s=A1AAD92A-9767-11E6-A27F-AC75C9F78EF4; t=1603825042; bh=gHSjuv4zqufkD8/M6KiP8rH4zr24xcIEfcNGQH7ILFI=; h=To:From:Message-ID:Date:MIME-Version; b=Wu1KHJ8h+4lBlRYFK68EE7vkfqnwSM9pzynuPYRkbfSurosBkk8ruo7hCGgZ0p4UU ji2np1MwIJb5HFJ79pVTLnCJbD9RSgop7U1V9RWuO+CIDi4DrXIaHYApXkg6P2VN84 boPfsWGpVyO5N77zzos8SU0T4TFaKs32pG67h+z5PFzfOsffUBnuCNZSM6drEmtOnn Xtoci25/zMuCivCwP5/8CXkNT+MSIBqVuHpjElwFZpy2/FfLwlocObA3Zx7L1mzGkm srJRdbeC/bJtRpXog8xiNfQD39zbrFBrjR1fbZZ/2O2kZmBRIJvn5KUq67MZ9aw9C4 8dx+OiuM1FGZA== X-Virus-Scanned: amavisd-new at rosalinux.ru Received: from mail.rosalinux.ru ([127.0.0.1]) by localhost (mail.rosalinux.ru [127.0.0.1]) (amavisd-new, port 10026) with ESMTP id UzshRGyib86J; Tue, 27 Oct 2020 21:57:22 +0300 (MSK) Received: from [192.168.1.173] (broadband-90-154-70-7.ip.moscow.rt.ru [90.154.70.7]) by mail.rosalinux.ru (Postfix) with ESMTPSA id D2552DC8993D8; Tue, 27 Oct 2020 21:57:21 +0300 (MSK) Subject: Re: [PATCH ima-evm-utils] boot_aggregate.test: Skip if CONFIG_IMA not enabled To: linux-integrity@vger.kernel.org Cc: Mimi Zohar References: <20201019200803.35255-1-petr.vorel@gmail.com> <20201020180231.GA14580@dell5510> <20201027184933.GA5210@sequoia> From: Mikhail Novosyolov Message-ID: <96983bdf-9f0a-b936-f24b-95161201da3a@rosalinux.ru> Date: Tue, 27 Oct 2020 21:57:21 +0300 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:68.0) Gecko/20100101 Thunderbird/68.10.0 MIME-Version: 1.0 In-Reply-To: <20201027184933.GA5210@sequoia> Content-Type: text/plain; charset=utf-8 Content-Language: ru-RU Content-Transfer-Encoding: quoted-printable Precedence: bulk List-ID: X-Mailing-List: linux-integrity@vger.kernel.org 27.10.2020 21:49, Tyler Hicks =D0=BF=D0=B8=D1=88=D0=B5=D1=82: > I can help with the Ubuntu status. IMA is still enabled there. You can > see CONFIG_IMA set to 'y' in the 20.04 LTS (Focal) and most recent 20.1= 0 > release (Groovy): > > https://git.launchpad.net/~ubuntu-kernel/ubuntu/+source/linux/+git/foca= l/tree/debian.master/config/annotations#n12861 > https://git.launchpad.net/~ubuntu-kernel/ubuntu/+source/linux/+git/groo= vy/tree/debian.master/config/annotations#n13173 > > Tyler Sorry for a bit offtop, by the way, does any Linux distro ship packages w= ith IMA-signed files? I know that work was done to support it in DEB and RPM and at least in RP= M it was upstreamized. We are going to try shipping IMA-signed packages in ROSA, it would be nic= e to study experience of other distros if there is any.