* [GIT PULL] integrity additional change v5.8 (#2)
@ 2020-06-29 15:27 Mimi Zohar
2020-07-01 19:10 ` pr-tracker-bot
0 siblings, 1 reply; 2+ messages in thread
From: Mimi Zohar @ 2020-06-29 15:27 UTC (permalink / raw)
To: Linus Torvalds
Cc: linux-integrity, linux-kernel, Maurizio Drocco, James Bottomley
Hi Linus,
Prior to Linux 5.8 the SHA1 "boot_aggregate" value was padded with 0's
and extended into the other TPM 2.0 banks. Included in the Linux 5.8
open window, TPM 2.0 PCR bank specific "boot_aggregate" values (PCRs 0
- 7) are calculated and extended into the TPM banks.
Distro releases are now shipping grub2 with TPM support, which extend
PCRs 8 & 9. I'd like for PCRs 8 & 9 to be included in the new
"boot_aggregate" calculations. For backwards compatibility, PCRs 8 &
9 are not included in the SHA1 TPM bank "boot_aggregate" calculation.
I'd appreciate your merging this additional change.
thanks,
Mimi
The following changes since commit 48778464bb7d346b47157d21ffde2af6b2d39110:
Linux 5.8-rc2 (2020-06-21 15:45:29 -0700)
are available in the git repository at:
git://git.kernel.org/pub/scm/linux/kernel/git/zohar/linux-integrity.git tags/integrity-v5.8-fix-2
for you to fetch changes up to 20c59ce010f84300f6c655d32db2610d3433f85c:
ima: extend boot_aggregate with kernel measurements (2020-06-24 20:47:24 -0400)
----------------------------------------------------------------
Include PCRs 8 & 9 in per TPM 2.0 bank boot_aggregate calculation
----------------------------------------------------------------
Maurizio Drocco (1):
ima: extend boot_aggregate with kernel measurements
security/integrity/ima/ima.h | 2 +-
security/integrity/ima/ima_crypto.c | 15 ++++++++++++++-
2 files changed, 15 insertions(+), 2 deletions(-)
^ permalink raw reply [flat|nested] 2+ messages in thread
* Re: [GIT PULL] integrity additional change v5.8 (#2)
2020-06-29 15:27 [GIT PULL] integrity additional change v5.8 (#2) Mimi Zohar
@ 2020-07-01 19:10 ` pr-tracker-bot
0 siblings, 0 replies; 2+ messages in thread
From: pr-tracker-bot @ 2020-07-01 19:10 UTC (permalink / raw)
To: Mimi Zohar
Cc: Linus Torvalds, linux-integrity, linux-kernel, Maurizio Drocco,
James Bottomley
The pull request you sent on Mon, 29 Jun 2020 11:27:13 -0400:
> git://git.kernel.org/pub/scm/linux/kernel/git/zohar/linux-integrity.git tags/integrity-v5.8-fix-2
has been merged into torvalds/linux.git:
https://git.kernel.org/torvalds/c/b13f40bc69a16e465d21e23ca5adf4bf26365815
Thank you!
--
Deet-doot-dot, I am a bot.
https://korg.wiki.kernel.org/userdoc/prtracker
^ permalink raw reply [flat|nested] 2+ messages in thread
end of thread, other threads:[~2020-07-01 19:10 UTC | newest]
Thread overview: 2+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2020-06-29 15:27 [GIT PULL] integrity additional change v5.8 (#2) Mimi Zohar
2020-07-01 19:10 ` pr-tracker-bot
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).