[PATCH] ima: clean up IMA_MEASURE_PCR_IDX in Kconfig
Mimi Zohar
zohar at linux.ibm.com
Mon Aug 24 15:00:52 UTC 2026
On Sat, 2026-08-22 at 01:15 +0100, Julian Braha wrote:
> The IMA_MEASURE_PCR_IDX option is not visible for users to set, so it
> always uses its default, 10. This means that the 'range 8 14' is dead
> code, and the "If unsure, use the default 10" in the help text is
> misleading because the user *has no other choice*.
>
> During the first patch submission to add this option in 2008 [1],
> the submitter originally gave this option a prompt:
>
> "PCR for Aggregate (8 <= Index <= 14)"
>
> then later removed it in the revision, without adjusting the rest of the
> option accordingly [2].
>
> Let's clean up this of this IMA_MEASURE_PCR_IDX config option to be
> consistent with its current, non-visible state.
>
> This dead range was found by kconfirm, a static analysis tool for Kconfig.
>
> Signed-off-by: Julian Braha <julianbraha at gmail.com>
The PCR index can be specified as a Kconfig IMA_MEASURE_PCR_IDX and on
individual policy records via the "pcr=" option.
Mimi
More information about the Linux-security-module-archive
mailing list