RFC dm ima: allow targets to remeasure their state
Get series with b4
b4 am [email protected]Versions newest first
- v1 RFC Latest3 patches 7 repliesIn review
Patches in v1 No applies recorded yet
| # | Subject and files | Size | Replies | Applied |
|---|---|---|---|---|
| 1/3 | dm ima: allow targets to remeasure their table entrydrivers/ drivers/ | +78 | 3 replies | |
| 2/3 | dm verity: add support for IMA target update eventdrivers/ | +6 | 2 replies | |
| 3/3 | dm ima: add documentation target update eventDocumentation/ | +33 | 0 replies |
Reviews trailers per patch
No Reviewed-by, Acked-by or Tested-by trailers for v1 yet.
Cover letter [dm-devel] [RFC PATCH 0/3] dm ima: allow targets to remeasure their state
The current DM IMA events do not cover the case where a device changes their attributes to indicate a state change. This adds a new event (dm_target_update) which allows targets to remeasure their table entries. The event includes the dm version, device metadata and the target data.
Currently only verity supports this event to ensure that device corruption can be detected using IMA which is useful for remote attestation.
The current implementation does not update the active table hash because it would require to rehash the entire table on every target change.
Thore Sommer (3):
dm ima: allow targets to remeasure their table entry dm verity: add support for IMA target update event dm ima: add documentation target update event
.../admin-guide/device-mapper/dm-ima.rst | 33 ++++++++ drivers/md/dm-ima.c | 76 +++++++++++++++++++ drivers/md/dm-ima.h | 2 + drivers/md/dm-verity-target.c | 6 ++ 4 files changed, 117 insertions(+)
Signature · 6 lines
2.34.1 -- dm-devel mailing list [email protected] https://listman.redhat.com/mailman/listinfo/dm-devel