[PATCH 1/7] ima: on soft reboot, restore the measurement list

Mimi Zohar zohar at linux.vnet.ibm.com
Tue Aug 9 07:02:57 PDT 2016


On Tue, 2016-08-09 at 13:35 +0000, David Laight wrote:

> Also why '__packed' - guarantees sub-optimal code generation.
> Much better to include explicit padding to align everything.

This patch set does not define a new format, but piggy backs on top of
the existing <securityfs>/ima/binary_runtime_measurements list.  The
prefixed buffer header includes a version, so that if in the future we
need to modify the format, we would be able to.

In terms of the prefixed header, how would you define the fields:
version, buffer size, number of measurements? 

Mimi




More information about the kexec mailing list