• Lakshmi Ramasubramanian's avatar
    ima: select ima-buf template for buffer measurement · dea87d08
    Lakshmi Ramasubramanian authored
    The default IMA template used for all policy rules is the value set
    for CONFIG_IMA_DEFAULT_TEMPLATE if the policy rule does not specify
    a template. The default IMA template for buffer measurements should be
    'ima-buf' - so that the measured buffer is correctly included in the IMA
    measurement log entry.
    
    With the default template format, buffer measurements are added to
    the measurement list, but do not include the buffer data, making it
    difficult, if not impossible, to validate. Including 'ima-buf'
    template records in the measurement list by default, should not impact
    existing attestation servers without 'ima-buf' template support.
    
    Initialize a global 'ima-buf' template and select that template,
    by default, for buffer measurements.
    Signed-off-by: default avatarLakshmi Ramasubramanian <nramas@linux.microsoft.com>
    Signed-off-by: default avatarMimi Zohar <zohar@linux.ibm.com>
    dea87d08
ima_template.c 13.1 KB