[ima-evm-utils:,0/3] evmctl option improvements

Message

Mimi Zohar July 31, 2020, 2:14 p.m. UTC

Support for the original IMA LTP "--verify" and "--validate" options was
just added in version 1.3.0.

- Verifying the template data digest against the value stored in the
  IMA measurement list should not be optional.  Drop "--verify".
- Walking the IMA measurement list to validate the PCRs should not by
  default "fix" the file integrity violations.  Rename the "--validate"
  option to "--ignore-violations", clafifying its purpose.

Mimi Zohar (3):
  Drop the ima_measurement "--verify" option
  Rename "--validate" to "--ignore-violations"
  Update the ima_boot_aggregate apsects of the "README" and "help" files

 README       |  6 +++---
 src/evmctl.c | 36 +++++++++++++++---------------------
 2 files changed, 18 insertions(+), 24 deletions(-)