Re: [PATCH v2 0/3] ima-evm-utils: Implement function to only create IMA signature

[Stefan Berger <stefanb@linux.ibm.com>]

I will rebase this series of patches on Vitaly's keyid-related changes, 
which are good to have 'underneath'.

   Stefan


On 4/27/21 3:31 PM, Stefan Berger wrote:
> This series of patches implements imaevm_create_ima_signature, a function that
> only creates an IMA v2 signature but does not write it into an xattr. This API
> fullfills a requirement of rpm-ostree where a tool is being built to sign all
> files from something similar to a tar byte stream, though where files are written
> to temporary files for signing purpose but the signature itself should not be
> written into the filesystem's xattr but simply returned via the API.
>
>    Stefan
>
> v2:
>   - use imaevm_calc_hash to also cover hash calculations of links,
>     directories etc.
>    
> Stefan Berger (3):
>    libimaevm: Implement imaevm_create_ima_signature
>    tests: Add program to create IMA signature with new API call
>    libimaevm: Have sign_hash_v2 call sign_hash_v2_pkey after reading key
>      file
>
>   src/imaevm.h                 |   2 +
>   src/libimaevm.c              | 148 ++++++++++++++++++++++++++++-------
>   tests/Makefile.am            |   6 ++
>   tests/create_ima_signature.c | 111 ++++++++++++++++++++++++++
>   tests/sign_verify.test       |  21 ++++-
>   5 files changed, 257 insertions(+), 31 deletions(-)
>   create mode 100644 tests/create_ima_signature.c
>