From: Mimi Zohar <zohar@linux.ibm.com>
To: linux-integrity@vger.kernel.org
Cc: Mimi Zohar <zohar@linux.ibm.com>, Petr Vorel <pvorel@suse.cz>,
Bruno Meneguele <bmeneg@redhat.com>,
Vitaly Chikunov <vt@altlinux.org>
Subject: [PATCH 0/6] ima-evm-utils: miscellanous code clean up and bug fixes
Date: Mon, 6 Jul 2020 22:26:25 -0400 [thread overview]
Message-ID: <1594088791-27370-1-git-send-email-zohar@linux.ibm.com> (raw)
The IMA LTP and standalone tests supported a number of features
properly, but were not carried forward in ima-evm-utils. For example,
hard coding "fixing" file time of measure, time of use (ToMToU)
violations, rather than requiring the "--validate" command option.
Similarly, verifying the template data digest against the template data
should be optional ("--verify").
On some older systems, the Linux kernel header package does not include
"hash_info.h", which results in the crypto algorithm strings not being
defined. To address this problem, hash_info.gen defines a "heredoc" to
generate the "hash_info.h" file.
The remaining changes are simple bug fixes.
Mimi
Mimi Zohar (6):
ima-evm-utils: fix PCRAggr error message
ima-evm-utils: fix measurement violation checking
ima-evm-utils: don't hardcode validating the IMA measurement list
ima-evm-utils: calculate and verify the template data digest
ima-evm-utils: use uint32_t for template length
ima-evm-utils: define a basic hash_info.h file
src/Makefile.am | 2 +-
src/evmctl.c | 38 ++++++++++++++++++++++++++++----------
src/hash_info.gen | 43 +++++++++++++++++++++++++++++++++++++++++++
3 files changed, 72 insertions(+), 11 deletions(-)
--
2.7.5
next reply other threads:[~2020-07-07 2:28 UTC|newest]
Thread overview: 10+ messages / expand[flat|nested] mbox.gz Atom feed top
2020-07-07 2:26 Mimi Zohar [this message]
2020-07-07 2:26 ` [PATCH 1/6] ima-evm-utils: fix PCRAggr error message Mimi Zohar
2020-07-07 2:26 ` [PATCH 2/6] ima-evm-utils: fix measurement violation checking Mimi Zohar
2020-07-07 2:26 ` [PATCH 3/6] ima-evm-utils: don't hardcode validating the IMA measurement list Mimi Zohar
2020-07-07 2:26 ` [PATCH 4/6] ima-evm-utils: calculate and verify the template data digest Mimi Zohar
2020-07-07 2:26 ` [PATCH 5/6] ima-evm-utils: use uint32_t for template length Mimi Zohar
2020-07-07 2:26 ` [PATCH 6/6] ima-evm-utils: define a basic hash_info.h file Mimi Zohar
2020-07-15 17:58 ` Bruno Meneguele
2020-07-15 19:28 ` Mimi Zohar
2020-07-15 20:18 ` Bruno Meneguele
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=1594088791-27370-1-git-send-email-zohar@linux.ibm.com \
--to=zohar@linux.ibm.com \
--cc=bmeneg@redhat.com \
--cc=linux-integrity@vger.kernel.org \
--cc=pvorel@suse.cz \
--cc=vt@altlinux.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.