[PATCH v9 1/7] ima: copy only complete measurement records across kexec
Mimi Zohar
zohar at linux.ibm.com
Wed Mar 5 02:08:00 UTC 2025
On Tue, 2025-03-04 at 11:03 -0800, steven chen wrote:
>
> - Compared the memory size allocated with memory size of the entire
> measurement record. Copy only complete measurement records if there
> is enough memory. If there is not enough memory, it will not copy
> any IMA measurement records, and this situation will result in a
> failure of remote attestation.
In discussions with Tushar, I was very clear that as many measurement records as
possible should be carried over to the kexec'ed kernel. The main change between
v8 and v9 was to make sure the last record copied was a complete record.
Mimi
More information about the Linux-security-module-archive
mailing list