Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]
Groups > linux.debian.kernel > #56682
| From | Ben Hutchings <ben@decadent.org.uk> |
|---|---|
| Newsgroups | linux.debian.bugs.dist, linux.debian.kernel |
| Subject | Bug#850339: initramfs-tools: Support Linux Integrity |
| Date | 2017-01-23 04:50 +0100 |
| Message-ID | <t2DNM-1fl-9@gated-at.bofh.it> (permalink) |
| References | <sWss1-3k9-3@gated-at.bofh.it> |
| Organization | linux.* mail to news gateway |
Cross-posted to 2 groups.
[Multipart message — attachments visible in raw view] - view raw
Control: tag -1 moreinfo On Thu, 5 Jan 2017 21:16:58 -0500 Stefan Berger <stefanb@linux.vnet.ibm.com> wrote: > Package: initramfs-tools > Version: 0.103ubuntu4.3 > Severity: wishlist > > Linux implements the Integrity Measurement Architecture (IMA) and the Extended > Verfication Module (EVM). > > IMA measures application and libraries as they are started and, using a policy, > it can also verify the signatures associated with the applications and > libraries. For this to work the operating system has load a policy and keys > into the kernel. This should be done when the system is booted. > > EVM protects file metadata against offline tampering. It does this by signing > (HMAC, public key signature) file attributes. For this to work the operating > system has to load the key used for verfication and signing into the kernel. > This should be done when the system is booted. As your implementation only adds new hook and boot scripts, why not put them in a separate package? Ben. -- Ben Hutchings Hoare's Law of Large Problems: Inside every large problem is a small problem struggling to get out.
Back to linux.debian.kernel | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread
Bug#850339: initramfs-tools: Support Linux Integrity Stefan Berger <stefanb@linux.vnet.ibm.com> - 2017-01-06 03:30 +0100
Bug#850339: initramfs-tools: Support Linux Integrity Ben Hutchings <ben@decadent.org.uk> - 2017-01-23 04:50 +0100
Bug#850339: initramfs-tools: Support Linux Integrity Stefan Berger <stefanb@linux.vnet.ibm.com> - 2017-01-23 15:10 +0100
Bug#850339: initramfs-tools: Support Linux Integrity Ben Hutchings <ben@decadent.org.uk> - 2017-01-23 16:00 +0100
Processed: Re: initramfs-tools: Support Linux Integrity owner@bugs.debian.org (Debian Bug Tracking System) - 2017-01-23 04:50 +0100
csiph-web