[Linux-ima-devel] [PATCH 12/12] ima: added Documentation/security/IMA-digest-lists.txt

Ken Goldman kgold at linux.vnet.ibm.com
Tue Dec 5 22:28:08 UTC 2017


On 7/25/2017 11:44 AM, Roberto Sassu wrote:
> +==== FORMAT ====
> +
> +The format of digest list metadata is:
> +
> +algo[2] digest_len[4] digest[digest_len]
> +        signature_len[4] signature[signature_len]
> +        path_len[4] path[path_len]
> +        ref_id_len[4] ref_id[ref_id_len]
> +        list_type_len[4] list_type[list_type_len]
> +

It's not obvious how this would handle the TPM 2.0 case where there are 
multiple PCR banks with different hash algorithms

--
To unsubscribe from this list: send the line "unsubscribe linux-security-module" in
the body of a message to majordomo at vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html



More information about the Linux-security-module-archive mailing list