Maurizio Drocco 20c59ce010 ima: extend boot_aggregate with kernel measurements ...

Registers 8-9 are used to store measurements of the kernel and its
command line (e.g., grub2 bootloader with tpm module enabled). IMA
should include them in the boot aggregate. Registers 8-9 should be
only included in non-SHA1 digests to avoid ambiguity.

Signed-off-by: Maurizio Drocco <maurizio.drocco@ibm.com>
Reviewed-by: Bruno Meneguele <bmeneg@redhat.com>
Tested-by: Bruno Meneguele <bmeneg@redhat.com>  (TPM 1.2, TPM 2.0)
Signed-off-by: Mimi Zohar <zohar@linux.ibm.com>

2020-06-24 20:47:24 -04:00

..

ima_api.c

ima: Directly free *entry in ima_alloc_init_template() if digests is NULL

2020-06-05 06:04:11 -04:00

ima_appraise.c

IMA: Add support to limit measuring keys

2019-12-12 08:53:50 -05:00

ima_asymmetric_keys.c

integrity: Remove duplicate pr_fmt definitions

2020-02-28 14:32:58 -05:00

ima_crypto.c

ima: extend boot_aggregate with kernel measurements

2020-06-24 20:47:24 -04:00

ima_fs.c

Merge tag 'integrity-v5.8' of git://git.kernel.org/pub/scm/linux/kernel/git/zohar/linux-integrity

2020-06-06 09:39:05 -07:00

ima_init.c

ima: Call ima_calc_boot_aggregate() in ima_eventdigest_init()

2020-06-03 17:20:43 -04:00

ima_kexec.c

integrity: Remove duplicate pr_fmt definitions

2020-02-28 14:32:58 -05:00

ima_main.c

ima: fix mprotect checking

2020-06-12 11:30:18 -04:00

ima_modsig.c

ima: Fix use after free in ima_read_modsig()

2019-08-28 15:01:24 -04:00

ima_mok.c

Revert "Merge tag 'keys-acl-20190703' of git://git.kernel.org/pub/scm/linux/kernel/git/dhowells/linux-fs"

2019-07-10 18:43:43 -07:00

ima_policy.c

ima: Directly assign the ima_default_policy pointer to ima_rules

2020-06-03 14:54:35 -04:00

ima_queue_keys.c

integrity: Remove duplicate pr_fmt definitions

2020-02-28 14:32:58 -05:00

ima_queue.c

ima: Use ima_hash_algo for collision detection in the measurement list

2020-04-19 22:03:39 -04:00

ima_template_lib.c

ima: Call ima_calc_boot_aggregate() in ima_eventdigest_init()

2020-06-03 17:20:43 -04:00

ima_template_lib.h

ima: Define ima-modsig template

2019-08-05 18:40:25 -04:00

ima_template.c

ima: Calculate and extend PCR with digests in ima_template_entry

2020-04-19 22:03:39 -04:00

ima.h

ima: extend boot_aggregate with kernel measurements

2020-06-24 20:47:24 -04:00

Kconfig

ima: add a new CONFIG for loading arch-specific policies

2020-03-12 07:43:57 -04:00

Makefile

IMA: Update KBUILD_MODNAME for IMA files to ima

2020-02-28 14:32:58 -05:00