Skip to content
Commit 20c59ce0 authored by Maurizio Drocco's avatar Maurizio Drocco Committed by Mimi Zohar
Browse files

ima: extend boot_aggregate with kernel measurements



Registers 8-9 are used to store measurements of the kernel and its
command line (e.g., grub2 bootloader with tpm module enabled). IMA
should include them in the boot aggregate. Registers 8-9 should be
only included in non-SHA1 digests to avoid ambiguity.

Signed-off-by: default avatarMaurizio Drocco <maurizio.drocco@ibm.com>
Reviewed-by: default avatarBruno Meneguele <bmeneg@redhat.com>
Tested-by: Bruno Meneguele <bmeneg@redhat.com>  (TPM 1.2, TPM 2.0)
Signed-off-by: default avatarMimi Zohar <zohar@linux.ibm.com>
parent 48778464
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment