Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > linux.debian.kernel > #68402 > unrolled thread

Bug#972459: linux: Reenable CONFIG_IMA

Started byPetr Vorel <petr.vorel@gmail.com>
First post2020-10-18 21:50 +0200
Last post2020-11-08 00:00 +0100
Articles 2 — 1 participant

Back to article view | Back to linux.debian.kernel


Contents

  Bug#972459: linux: Reenable CONFIG_IMA Petr Vorel <petr.vorel@gmail.com> - 2020-10-18 21:50 +0200
    Bug#972459: linux: Reenable CONFIG_IMA Petr Vorel <petr.vorel@gmail.com> - 2020-11-08 00:00 +0100

#68402 — Bug#972459: linux: Reenable CONFIG_IMA

FromPetr Vorel <petr.vorel@gmail.com>
Date2020-10-18 21:50 +0200
SubjectBug#972459: linux: Reenable CONFIG_IMA
Message-ID<B1mQN-2Ig-1@gated-at.bofh.it>
Source: linux
Version: Reenable CONFIG_IMA
Severity: wishlist

Hi,

this bug was enabled for 4.9.24 [1] as part of #788290, it was later disabled
for 4.16-1 [2] due problems with lockdown. IMHO lockdown problems has been
solved in 5.4 [3].

Could be CONFIG_IMA reenabled? Or is there any other problem to be solved?

Kind regards,
Petr

[1] https://salsa.debian.org/kernel-team/linux/-/commit/f3c3de0f6000fd6280396dd9b354699839c3cacb
[2] https://salsa.debian.org/kernel-team/linux/-/commit/82596c5122fe1e0d5e15053e93f4384419e26ed7
[3] https://lwn.net/Articles/791863/

[toc] | [next] | [standalone]


#68517

FromPetr Vorel <petr.vorel@gmail.com>
Date2020-11-08 00:00 +0100
Message-ID<B8FlE-4zw-1@gated-at.bofh.it>
In reply to#68402

[Multipart message — attachments visible in raw view] — view raw

Package: src:linux
Followup-For: Bug #972459

Adding 2 patches: enabling CONFIG_IMA and also enable CONFIG_EVM and CONFIG_EVM_ATTR_FSUUID.
IMHO it does make sense to enable EVM as well.
Not sure what exactly should be enabled from EVM.

Kind regards,
Petr

[toc] | [prev] | [standalone]


Back to top | Article view | linux.debian.kernel


csiph-web