diff for duplicates of <1496755412.5546.71.camel@linux.vnet.ibm.com> diff --git a/a/1.txt b/N1/1.txt index 45a1da4..409247e 100644 --- a/a/1.txt +++ b/N1/1.txt @@ -60,26 +60,21 @@ On Tue, 2017-06-06 at 14:45 +0200, Roberto Sassu wrote: > after ima_dump_measurement_list() is called? The upstreamed version allocates the segment in kexec load and then -fills the buffer. ?However, in between getting the current memory size +fills the buffer. However, in between getting the current memory size needed and filling the buffer, additional measurements can be added. Thus the segment size needs to be larger than the current memory -size.? +size. The header reflects the number of measurements and the actual buffer -size, not the segment size. ?When restoring the measurement list, +size, not the segment size. When restoring the measurement list, however, we rely on the number of measurements and use the buffer size -as a reference to prevent accessing memory beyond the buffer. ?The +as a reference to prevent accessing memory beyond the buffer. The buffer size does not need to be exact. ** Note ** This upstream version, which doesn't update the measurement list in kexec execute, requires all files to be pre-measured, before calling -kexec load. ?Otherwise, the measurement list will not validate against +kexec load. Otherwise, the measurement list will not validate against the quoted TPM PCRs. Mimi - --- -To unsubscribe from this list: send the line "unsubscribe linux-security-module" in -the body of a message to majordomo at vger.kernel.org -More majordomo info at http://vger.kernel.org/majordomo-info.html diff --git a/a/content_digest b/N1/content_digest index 28679cc..7836a4c 100644 --- a/a/content_digest +++ b/N1/content_digest @@ -4,10 +4,13 @@ "ref\0c4aa904b-052e-778d-caf9-47fbe8d961cb@huawei.com\0" "ref\01496746591.5546.28.camel@linux.vnet.ibm.com\0" "ref\09b9e4d64-f08b-6c78-2e7d-9df9ac5d6969@huawei.com\0" - "From\0zohar@linux.vnet.ibm.com (Mimi Zohar)\0" - "Subject\0[PATCH 5/7] ima: add securityfs interface to save a measurements list with kexec header\0" + "From\0Mimi Zohar <zohar@linux.vnet.ibm.com>\0" + "Subject\0Re: [PATCH 5/7] ima: add securityfs interface to save a measurements list with kexec header\0" "Date\0Tue, 06 Jun 2017 09:23:32 -0400\0" - "To\0linux-security-module@vger.kernel.org\0" + "To\0Roberto Sassu <roberto.sassu@huawei.com>" + " linux-ima-devel@lists.sourceforge.net\0" + "Cc\0linux-security-module@vger.kernel.org" + " linux-kernel@vger.kernel.org\0" "\00:1\0" "b\0" "On Tue, 2017-06-06 at 14:45 +0200, Roberto Sassu wrote:\n" @@ -72,28 +75,23 @@ "> after ima_dump_measurement_list() is called?\n" "\n" "The upstreamed version allocates the segment in kexec load and then\n" - "fills the buffer. ?However, in between getting the current memory size\n" + "fills the buffer. \302\240However, in between getting the current memory size\n" "needed and filling the buffer, additional measurements can be added.\n" "Thus the segment size needs to be larger than the current memory\n" - "size.?\n" + "size.\302\240\n" "\n" "The header reflects the number of measurements and the actual buffer\n" - "size, not the segment size. ?When restoring the measurement list,\n" + "size, not the segment size. \302\240When restoring the measurement list,\n" "however, we rely on the number of measurements and use the buffer size\n" - "as a reference to prevent accessing memory beyond the buffer. ?The\n" + "as a reference to prevent accessing memory beyond the buffer. \302\240The\n" "buffer size does not need to be exact.\n" "\n" "** Note **\n" "This upstream version, which doesn't update the measurement list in\n" "kexec execute, requires all files to be pre-measured, before calling\n" - "kexec load. ?Otherwise, the measurement list will not validate against\n" + "kexec load. \302\240Otherwise, the measurement list will not validate against\n" "the quoted TPM PCRs.\n" "\n" - "Mimi\n" - "\n" - "--\n" - "To unsubscribe from this list: send the line \"unsubscribe linux-security-module\" in\n" - "the body of a message to majordomo at vger.kernel.org\n" - More majordomo info at http://vger.kernel.org/majordomo-info.html + Mimi -1459824588809921ca7321e621499ed64befdcb2068b5302a780d0aa8493e07b +a29f99a55eaed3607a421016f3f27ea374ebf212c2ebe216f96e6eeec0d9c07f
This is an external index of several public inboxes, see mirroring instructions on how to clone and mirror all data and code used by this external index.