From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1752215AbcFVNf1 (ORCPT ); Wed, 22 Jun 2016 09:35:27 -0400 Received: from mx0a-001b2d01.pphosted.com ([148.163.156.1]:60441 "EHLO mx0a-001b2d01.pphosted.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1751880AbcFVNfU (ORCPT ); Wed, 22 Jun 2016 09:35:20 -0400 X-IBM-Helo: d23dlp02.au.ibm.com X-IBM-MailFrom: zohar@linux.vnet.ibm.com X-IBM-RcptTo: linux-kernel@vger.kernel.org;linux-security-module@vger.kernel.org From: Mimi Zohar To: linux-security-module , linux-ima-devel Cc: Dave Young , kexec@lists.infradead.org, linux-kernel@vger.kernel.org, Eric Biederman , Mimi Zohar Subject: [PATCH 0/3] support other types of measurements Date: Wed, 22 Jun 2016 09:35:02 -0400 X-Mailer: git-send-email 2.1.0 X-TM-AS-MML: disable X-Content-Scanned: Fidelis XPS MAILER x-cbid: 16062213-0004-0000-0000-00000171BCD9 X-IBM-AV-DETECTION: SAVI=unused REMOTE=unused XFE=unused x-cbparentid: 16062213-0005-0000-0000-00000820B5C5 Message-Id: <1466602505-21915-1-git-send-email-zohar@linux.vnet.ibm.com> X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10432:,, definitions=2016-06-22_09:,, signatures=0 X-Proofpoint-Spam-Details: rule=outbound_notspam policy=outbound score=0 spamscore=0 suspectscore=0 malwarescore=0 phishscore=0 adultscore=0 bulkscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.0.1-1604210000 definitions=main-1606220145 Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org In addition to file measurements, other types of measurements should be included in the IMA measurement list to attest to the integrity of the running system. This patch set introduces two new types of measurements - buffer and pre-calculated digests. The first, for example, can be used to measure the kexec boot command line, while the latter could be used for including asymmetric key id information. Mimi Zohar (3): ima: measure other types of data kexec: measure boot command line ima: add pre-calculated measurements (experimental) Documentation/ABI/testing/ima_policy | 1 + include/linux/ima.h | 24 +++++ kernel/kexec_file.c | 4 + security/integrity/ima/Kconfig | 8 ++ security/integrity/ima/Makefile | 2 +- security/integrity/ima/ima.h | 4 + security/integrity/ima/ima_buffer.c | 164 +++++++++++++++++++++++++++++++++++ security/integrity/ima/ima_policy.c | 51 ++++++++++- 8 files changed, 255 insertions(+), 3 deletions(-) create mode 100644 security/integrity/ima/ima_buffer.c -- 2.1.0