• Tushar Sugandhi's avatar
    dm ima: measure data on device resume · 8eb6fab4
    Tushar Sugandhi authored
    A given block device can load a table multiple times, with different
    input parameters, before eventually resuming it.  Further, a device may
    be suspended and then resumed.  The device may never resume after a
    table-load.  Because of the above valid scenarios for a given device,
    it is important to measure and log the device resume event using IMA.
    
    Also, if the table is large, measuring it in clear-text each time the
    device changes state, will unnecessarily increase the size of IMA log.
    Since the table clear-text is already measured during table-load event,
    measuring the hash during resume should be sufficient to validate the
    table contents.
    
    Measure the device parameters, and hash of the active table, when the
    device is resumed.
    Signed-off-by: default avatarTushar Sugandhi <tusharsu@linux.microsoft.com>
    Signed-off-by: default avatarMike Snitzer <snitzer@redhat.com>
    8eb6fab4
dm-ioctl.c 49.3 KB