Re: [PATCH] IMA: Turn IMA_MEASURE_ASYMMETRIC_KEYS off by default

From: Mimi Zohar
Date: Wed Jan 22 2020 - 15:55:10 EST


On Wed, 2020-01-22 at 12:05 -0800, Lakshmi Ramasubramanian wrote:
> On 1/22/20 12:02 PM, Mimi Zohar wrote:
>
> >
> > Thanks, Lakshmi. ÂThis requires moving the code around. ÂInstead of
> > doing this on the current code base, I suggest posting a v9 version of
> > the entire "IMA: Deferred measurement of keys".
> >
> > I suggest making the switch from spinlock to mutex, as you had it
> > originally, before posting v9. ÂThe commit history will then be a lot
> > cleaner.
> >
> > thanks,
> >
> > Mimi
> >
>
> Sure Mimi - I'll post an update to the patch set shortly.

I just pushed out the next-integrity-testing branch without the
"Deferred measurement of keys" patches. ÂI've kept the "IMA: pre-
allocate buffer to hold keyrings string" patch, though it probably
isn't required.

thanks,

Mimi