linux-kernel - Two questions about IMA

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <BL0PR11MB3252AC76F135A7546554BDF88D9D0@BL0PR11MB3252.namprd11.prod.outlook.com>
Date:   Tue, 16 Jun 2020 14:41:33 +0000
From:   "Zhao, Shirley" <shirley.zhao@...el.com>
To:     "linux-integrity@...r.kernel.org" <linux-integrity@...r.kernel.org>,
        "LSM List" <linux-security-module@...r.kernel.org>,
        linux-kernel <linux-kernel@...r.kernel.org>
Subject: Two questions about IMA

Hi, all, 

This is Shirley from, I am a newer of IMA. 
I have some questions. Can you help?

According to the guide: https://sourceforge.net/p/linux-ima/wiki/Home/#linux-extended-verification-module-evm. 
1.	How to calculate the template hash in /sys/kernel/security/ima/ascii_runtime_measurements? Like below:
PCR     template-hash                           filedata-hash                           filename-hint
10 91f34b5c671d73504b274a919661cf80dab1e127 ima-ng sha1:1801e1be3e65ef1eaa5c16617bec8f1274eaf6b3 boot_aggregate 
10 8b1683287f61f96e5448f40bdef6df32be86486a ima-ng sha256:efdd249edec97caf9328a4a01baa99b7d660d1afc2e118b69137081c9b689954 /init 
2.	Ubuntu 20.04 is installed on my machine, but ascii_bios_measurements can’t be found under /sys/kernel/security/tpm0/. 
There is only binary_bios_measurements under tpm0/. 
So where to find the bios measure list on Ubuntu 20.04?

Thanks. 

-	Shirley