From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org X-Spam-Level: X-Spam-Status: No, score=-14.3 required=3.0 tests=BAYES_00,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,HEADER_FROM_DIFFERENT_DOMAINS,MAILING_LIST_MULTI, SIGNED_OFF_BY,SPF_HELO_NONE,SPF_PASS,URIBL_BLOCKED,USER_IN_DEF_DKIM_WL autolearn=no autolearn_force=no version=3.4.0 Received: from mail.kernel.org (mail.kernel.org [198.145.29.99]) by smtp.lore.kernel.org (Postfix) with ESMTP id A6301C4363A for ; Tue, 27 Oct 2020 18:50:07 +0000 (UTC) Received: from vger.kernel.org (vger.kernel.org [23.128.96.18]) by mail.kernel.org (Postfix) with ESMTP id 4D06D207DE for ; Tue, 27 Oct 2020 18:50:07 +0000 (UTC) Authentication-Results: mail.kernel.org; dkim=pass (1024-bit key) header.d=linux.microsoft.com header.i=@linux.microsoft.com header.b="QeXXkBqJ" Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1829152AbgJ0St4 (ORCPT ); Tue, 27 Oct 2020 14:49:56 -0400 Received: from linux.microsoft.com ([13.77.154.182]:59762 "EHLO linux.microsoft.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1829143AbgJ0Stw (ORCPT ); Tue, 27 Oct 2020 14:49:52 -0400 Received: from sequoia (162-237-133-238.lightspeed.rcsntx.sbcglobal.net [162.237.133.238]) by linux.microsoft.com (Postfix) with ESMTPSA id 71EF520C27C5; Tue, 27 Oct 2020 11:49:51 -0700 (PDT) DKIM-Filter: OpenDKIM Filter v2.11.0 linux.microsoft.com 71EF520C27C5 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=linux.microsoft.com; s=default; t=1603824591; bh=UCqR8kmyvQ0FXKqJhCb0mbrqDtMWWtwjtNpTAWZi0CE=; h=Date:From:To:Cc:Subject:References:In-Reply-To:From; b=QeXXkBqJFZ4o4JS2eSSKWDo91NZioycspBg4MtM0r8Rza0FWgX/KVEATGe2UW07pd f87Uyrpd5MDppghwpFM529K5HVWCTGrZ9b71iW9v0DMVn9uN0D5JkMhxj5fOX31X7w Y02px0ZOINQ2UxhdrdYRfBkV1gVrr/uEWSA/Yvuw= Date: Tue, 27 Oct 2020 13:49:33 -0500 From: Tyler Hicks To: Petr Vorel Cc: Mimi Zohar , linux-integrity@vger.kernel.org, Mimi Zohar , Dmitry Eremin-Solenikov Subject: Re: [PATCH ima-evm-utils] boot_aggregate.test: Skip if CONFIG_IMA not enabled Message-ID: <20201027184933.GA5210@sequoia> References: <20201019200803.35255-1-petr.vorel@gmail.com> <20201020180231.GA14580@dell5510> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <20201020180231.GA14580@dell5510> Precedence: bulk List-ID: X-Mailing-List: linux-integrity@vger.kernel.org On 2020-10-20 20:02:31, Petr Vorel wrote: > Hi Mimi, Dmitry, > > > [Cc'ing Dmitry Eremin-Solenikov] > > > Hi Petr, > > > On Mon, 2020-10-19 at 22:08 +0200, Petr Vorel wrote: > > > This is required, because when TPM HW available (i.e. -c /dev/tpm0), > > > evmctl ima_boot_aggregate returns sha1:xxxx. > > > > skip requires to move cleanup(). > > > > Signed-off-by: Petr Vorel > > > Nice. > > > --- > > > Hi Mimi, > > > > this Fixes problems on current Debian, which has still disabled CONFIG_IMA > > > (FYI [1]). I was not able to figure out how to get it working with > > > sample-* files, but maybe there is a way. > > > > Although it sound strange, people may want to build and check evmctl > > > even on a system with disabled CONFIG_IMA (both Debian and Ubuntu have > > > outdated ima-evm-utils (1.1)). > > > Oops, I need to keep Dmitry in the loop better. I'm hoping to release > > v1.3 shortly. > Thanks! > @Dmitry do you wish to be Cc: before release or any other time? > > > > Kind regards, > > > Petr > > > > [1] https://bugs.debian.org/972459 linux: Reenable CONFIG_IMA > > > I wasn't aware that because of lockdown, IMA was disabled. Thank you > > for reporting and updating the IMA w/lockdown status. > Feel free to comment it, please. It'd be nice to have IMA in Debian (not sure > about Ubuntu status). I can help with the Ubuntu status. IMA is still enabled there. You can see CONFIG_IMA set to 'y' in the 20.04 LTS (Focal) and most recent 20.10 release (Groovy): https://git.launchpad.net/~ubuntu-kernel/ubuntu/+source/linux/+git/focal/tree/debian.master/config/annotations#n12861 https://git.launchpad.net/~ubuntu-kernel/ubuntu/+source/linux/+git/groovy/tree/debian.master/config/annotations#n13173 Tyler > > @Dmitry: do you plan to update Debian package? (you're the listed maintainer, > although the package was signed by Wartan Hachaturow). > > > Mimi > > Kind regards, > Petr