[Linux-ima-devel] [PATCH v2 4/7] ima: measure and appraise kexec image and initramfs

Petko Manolov petkan at mip-labs.com
Mon Dec 28 06:59:46 PST 2015


On 15-12-28 09:42:22, Mimi Zohar wrote:
> On Mon, 2015-12-28 at 16:29 +0200, Petko Manolov wrote:
> > 
> > I kind of wonder isn't it possible to optimize the file read?  If the file 
> > is relatively small (a few megabytes, for example) it will fit into any 
> > modern system's memory.  At least those that cares to run IMA, i mean.
> > 
> > Fetching file page by page is a slow process even though the BIO subsystem 
> > reads larger chunks off the real storage devices.  Has anyone done a 
> > benchmark test?
> 
> Dmitry recently added asynchronous hash (ahash) support, which allows HW 
> crypto acceleration, for calculating the file hash.

This is nice.  However, i was referring to reading a file page by page vs larger 
(a couple of megabytes) chunks.  Is this also covered by the ahash support?


cheers,
Petko



More information about the kexec mailing list