linux-kernel - Re: [PATCH v9 1/7] ima: copy only complete measurement records across kexec

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <3aadae5d35af3f984b9e8bc548d73bb878d666bd.camel@linux.ibm.com>
Date: Tue, 04 Mar 2025 21:08:00 -0500
From: Mimi Zohar <zohar@...ux.ibm.com>
To: steven chen <chenste@...ux.microsoft.com>, stefanb@...ux.ibm.com,
        roberto.sassu@...weicloud.com, roberto.sassu@...wei.com,
        eric.snowberg@...cle.com, ebiederm@...ssion.com, paul@...l-moore.com,
        code@...icks.com, bauermann@...abnow.com,
        linux-integrity@...r.kernel.org, kexec@...ts.infradead.org,
        linux-security-module@...r.kernel.org, linux-kernel@...r.kernel.org
Cc: madvenka@...ux.microsoft.com, nramas@...ux.microsoft.com,
        James.Bottomley@...senPartnership.com, bhe@...hat.com,
        vgoyal@...hat.com, dyoung@...hat.com
Subject: Re: [PATCH v9 1/7] ima: copy only complete measurement records
 across kexec

On Tue, 2025-03-04 at 11:03 -0800, steven chen wrote:
> 
>  - Compared the memory size allocated with memory size of the entire 
>    measurement record. Copy only complete measurement records if there 
>    is enough memory. If there is not enough memory, it will not copy
>    any IMA measurement records, and this situation will result in a 
>    failure of remote attestation.

In discussions with Tushar, I was very clear that as many measurement records as
possible should be carried over to the kexec'ed kernel.  The main change between
v8 and v9 was to make sure the last record copied was a complete record.

Mimi