| Message ID | 20200807204652.5928-1-pvorel@suse.cz (mailing list archive) |
|---|---|
| Headers | show |
| Series | IMA: verify measurement of certificate imported into a keyring | expand |
Hi Mimi, > sending enhanced Lachlan's version. > I haven't tested this patchset, could please anybody test it? @Mimi FYI, I'm waiting for your review to merge this patchset (when you have time). Kind regards, Petr > Lachlan Sneff (1): > IMA: Add a test to verify measurement of certificate imported into a > keyring I guess I should shorten this message. > Petr Vorel (3): > IMA/ima_keys.sh Fix policy content check usage > IMA: Refactor datafiles directory > IMA/ima_keys.sh: Enhance policy checks Kind regards, Petr
Hi, sending enhanced Lachlan's version. I haven't tested this patchset, could please anybody test it? Kind regards, Petr Lachlan Sneff (1): IMA: Add a test to verify measurement of certificate imported into a keyring Petr Vorel (3): IMA/ima_keys.sh Fix policy content check usage IMA: Refactor datafiles directory IMA/ima_keys.sh: Enhance policy checks .../kernel/security/integrity/ima/README.md | 12 ++- .../security/integrity/ima/datafiles/Makefile | 10 +- .../ima/datafiles/ima_kexec/Makefile | 11 ++ .../datafiles/{ => ima_kexec}/kexec.policy | 0 .../integrity/ima/datafiles/ima_keys/Makefile | 11 ++ .../datafiles/{ => ima_keys}/keycheck.policy | 2 +- .../ima/datafiles/ima_keys/x509_ima.der | Bin 0 -> 650 bytes .../ima/datafiles/ima_policy/Makefile | 11 ++ .../datafiles/{ => ima_policy}/measure.policy | 0 .../{ => ima_policy}/measure.policy-invalid | 0 .../security/integrity/ima/tests/ima_keys.sh | 96 +++++++++++++++--- 11 files changed, 129 insertions(+), 24 deletions(-) create mode 100644 testcases/kernel/security/integrity/ima/datafiles/ima_kexec/Makefile rename testcases/kernel/security/integrity/ima/datafiles/{ => ima_kexec}/kexec.policy (100%) create mode 100644 testcases/kernel/security/integrity/ima/datafiles/ima_keys/Makefile rename testcases/kernel/security/integrity/ima/datafiles/{ => ima_keys}/keycheck.policy (59%) create mode 100644 testcases/kernel/security/integrity/ima/datafiles/ima_keys/x509_ima.der create mode 100644 testcases/kernel/security/integrity/ima/datafiles/ima_policy/Makefile rename testcases/kernel/security/integrity/ima/datafiles/{ => ima_policy}/measure.policy (100%) rename testcases/kernel/security/integrity/ima/datafiles/{ => ima_policy}/measure.policy-invalid (100%)