Re: [PATCH 00/12] One more attempt at useful kernel lockdown

H. Peter Anvin
2013-09-10T23:49:01Z

On 09/10/2013 04:43 PM, Mimi Zohar wrote:
>
> Why invent yet another method of verifying the integrity of a file based
> on a signature? Why not use the existing method for appraising files?
> Just create a new integrity hook at the appropriate place.
>

What would the deliverables be from the hardware vendor and what tools
would you expect them to need on their end?

-hpa