From mboxrd@z Thu Jan 1 00:00:00 1970 Return-path: Received: from mendozajonas.com ([188.166.185.233]) by bombadil.infradead.org with esmtps (Exim 4.85_2 #1 (Red Hat Linux)) id 1bXGDZ-0000px-Kn for kexec@lists.infradead.org; Tue, 09 Aug 2016 23:13:55 +0000 Message-ID: <1470784396.2301.2.camel@mendozajonas.com> Subject: Re: [PATCH 1/7] ima: on soft reboot, restore the measurement list From: Samuel Mendoza-Jonas Date: Wed, 10 Aug 2016 09:13:16 +1000 In-Reply-To: <3544655.o5QPxko4Ba@hactar> References: <1470313475-20090-1-git-send-email-zohar@linux.vnet.ibm.com> <87wpjqtdg8.fsf@concordia.ellerman.id.au> <1470747673.2881.118.camel@linux.vnet.ibm.com> <3544655.o5QPxko4Ba@hactar> Mime-Version: 1.0 List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: "kexec" Errors-To: kexec-bounces+dwmw2=infradead.org@lists.infradead.org To: Thiago Jung Bauermann , Mimi Zohar Cc: Dave Young , kexec@lists.infradead.org, linux-kernel@vger.kernel.org, linux-security-module@vger.kernel.org, linux-ima-devel@lists.sourceforge.net, linuxppc-dev@lists.ozlabs.org On Tue, 2016-08-09 at 10:19 -0300, Thiago Jung Bauermann wrote: > Am Dienstag, 09 August 2016, 09:01:13 schrieb Mimi Zohar: > > > > On Tue, 2016-08-09 at 20:59 +1000, Michael Ellerman wrote: > > > > > > Mimi Zohar writes: > > > > > > > > diff --git a/security/integrity/ima/ima.h > > > > b/security/integrity/ima/ima.h > > > > index b5728da..84e8d36 100644 > > > > --- a/security/integrity/ima/ima.h > > > > +++ b/security/integrity/ima/ima.h > > > > @@ -102,6 +102,13 @@ struct ima_queue_entry { > > > > > > > > }; > > > > extern struct list_head ima_measurements; /* list of all > measurements > > > > > > > > > > > > > */ > > > > > > > > +/* Some details preceding the binary serialized measurement list */ > > > > +struct ima_kexec_hdr { > > > > + unsigned short version; > > > > + unsigned long buffer_size; > > > > + unsigned long count; > > > > +} __packed; > > > > + > > > > > > Am I understanding it correctly that this structure is passed between > > > kernels? > > Yes, the header prefixes the measurement list, which is being passed on > > the same computer to the next kernel. Could the architecture (eg. > > LE/BE) change between soft re-boots? > > Yes. I am able to boot a BE kernel from an LE kernel with my patches. > Whether we want to support that or not is another question... The answer to that question is almost certainly yes - on POWER the most immediate example would be soft-rebooting from a BE host into an LE Petitboot kernel, or vice versa. _______________________________________________ kexec mailing list kexec@lists.infradead.org http://lists.infradead.org/mailman/listinfo/kexec