mbox series

[0/3] additional "ima-measurement" support

Message ID 1594305396-21280-1-git-send-email-zohar@linux.ibm.com (mailing list archive)
Headers show
Series additional "ima-measurement" support | expand

Message

Mimi Zohar July 9, 2020, 2:36 p.m. UTC
"evmctl ima_measurement" walks the IMA measurement list re-calculating
the TPM PCR banks.

- Support the original method of extending the TPM 2.0 banks with the
  padded SHA1 digest.
- Instead of reading the hardware or software TPM PCRs, support
  providing the TPM 1.2 PCRs as a file


Mimi Zohar (3):
  ima-evm-utils: improve reading TPM 1.2 PCRs
  ima_evm_utils: support extending TPM 2.0 banks w/original SHA1 padded
    digest
  ima-evm-utils: support providing the TPM 1.2 PCRs as a file

 src/evmctl.c | 128 +++++++++++++++++++++++++++++++++++++++++------------------
 1 file changed, 90 insertions(+), 38 deletions(-)