Re: [PATCH v7 ima-evm-utils 1/2] set default hash algorithm in configuration time

[Bruno Meneguele <bmeneg@redhat.com>]

[-- Attachment #1: Type: text/plain, Size: 1034 bytes --]

On Tue, Sep 14, 2021 at 11:24:22AM -0400, Mimi Zohar wrote:
> On Fri, 2021-09-10 at 15:47 -0300, Bruno Meneguele wrote:
> > The default hash algorithm for evmctl is today hardcoded in the libimaevm.c
> > file. To facilitate package maintainers across different distributions to
> > set their own default hash algorithm this, patch adds the
> > --with-default-hash=<algo> option to the configuration script.
> > 
> > The chosen algorithm will then be checked by its available in the kernel,
> > otherwise IMA won't be able to verify files hashed by the user. For that,
> > the kernel header hash_info.h used as the source of supported hashes. In
> > case the hash_info.h header is not present, the configuration script warns
> > about it, but uses whatever the user specified in the option.
> > 
> > Signed-off-by: Bruno Meneguele <bmeneg@redhat.com>
> 
> Thanks, Bruno.  This patch set is now queued in the next-testing
> branch.
> 
> Mimi
> 

Thanks Mimi.

-- 
bmeneg 
PGP Key: http://bmeneg.com/pubkey.txt

[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 488 bytes --]