ima: extend boot_aggregate with kernel measurements
authorMaurizio Drocco <maurizio.drocco@ibm.com>
Tue, 23 Jun 2020 15:57:32 +0000 (11:57 -0400)
committerMimi Zohar <zohar@linux.ibm.com>
Thu, 25 Jun 2020 00:47:24 +0000 (20:47 -0400)
commit20c59ce010f84300f6c655d32db2610d3433f85c
tree36dc25b12cddb87b4a200819375398cf5a3917a3
parent48778464bb7d346b47157d21ffde2af6b2d39110
ima: extend boot_aggregate with kernel measurements

Registers 8-9 are used to store measurements of the kernel and its
command line (e.g., grub2 bootloader with tpm module enabled). IMA
should include them in the boot aggregate. Registers 8-9 should be
only included in non-SHA1 digests to avoid ambiguity.

Signed-off-by: Maurizio Drocco <maurizio.drocco@ibm.com>
Reviewed-by: Bruno Meneguele <bmeneg@redhat.com>
Tested-by: Bruno Meneguele <bmeneg@redhat.com> (TPM 1.2, TPM 2.0)
Signed-off-by: Mimi Zohar <zohar@linux.ibm.com>
security/integrity/ima/ima.h
security/integrity/ima/ima_crypto.c