Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]
Groups > linux.kernel > #1685943
| From | Mimi Zohar <zohar@linux.vnet.ibm.com> |
|---|---|
| Newsgroups | linux.kernel |
| Subject | Re: [PATCH v2] integrity: track mtime in addition to i_version for assessment |
| Date | 2017-07-12 20:00 +0200 |
| Message-ID | <u2u5B-2Sc-23@gated-at.bofh.it> (permalink) |
| References | (5 earlier) <u0IcF-Hi-1@gated-at.bofh.it> <u1FPs-4Ta-21@gated-at.bofh.it> <u2etQ-1nU-5@gated-at.bofh.it> <u2oWe-8bN-9@gated-at.bofh.it> <u2qY1-YW-3@gated-at.bofh.it> |
| Organization | linux.* mail to news gateway |
On Wed, 2017-07-12 at 10:35 -0400, Bruce Fields wrote: > On Wed, Jul 12, 2017 at 08:20:21AM -0400, Mimi Zohar wrote: > > Right, currently the only way of knowing is by looking at the IMA > > measurement list to see if modified files are re-measured or, as you > > said, by looking at the code. > > Who's actually using this, and do they do any kind of checks, or > document the filesystem-specific limitations? Knowing who is using it and how it is being used is the big question. I only hear about it when there are problems. Over the years, there have been a number of Linux Security Summit (LSS) talks, which have been mostly about embedded systems or locked down systems, not so much for generic systems. Examples include: - Design and Implementation of a Security Architecture for Critical Infrastructure Industrial Control Systems - David Safford, GE 2016 - IMA/EVM: Real Applications for Embedded Networking Systems - Petko Manolov, Konsulko Group, and Mark Baushke, Juniper Networks 2015 - CC3: An Identity Attested Linux Security Supervisor Architecture - Greg Wettstein, IDfusion 2015 - The Linux Integrity Subsystem and TPM-based Network Endpoint Assessment - Andreas Steffen, HSR University of Applied Sciences Rapperswil, Switzerland 2012 Mimi
Back to linux.kernel | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread
[PATCH v2] integrity: track mtime in addition to i_version for assessment Jeff Layton <jlayton@kernel.org> - 2017-07-07 16:10 +0200
Re: [PATCH v2] integrity: track mtime in addition to i_version for assessment Jeff Layton <jlayton@poochiereds.net> - 2017-07-07 19:00 +0200
Re: [PATCH v2] integrity: track mtime in addition to i_version for assessment Mimi Zohar <zohar@linux.vnet.ibm.com> - 2017-07-07 19:30 +0200
Re: [PATCH v2] integrity: track mtime in addition to i_version for assessment Jeff Layton <jlayton@redhat.com> - 2017-07-07 19:50 +0200
Re: [PATCH v2] integrity: track mtime in addition to i_version for assessment Mimi Zohar <zohar@linux.vnet.ibm.com> - 2017-07-07 22:10 +0200
Re: [PATCH v2] integrity: track mtime in addition to i_version for assessment Jeff Layton <jlayton@redhat.com> - 2017-07-07 22:40 +0200
Re: [PATCH v2] integrity: track mtime in addition to i_version for assessment Mimi Zohar <zohar@linux.vnet.ibm.com> - 2017-07-10 14:20 +0200
Re: [PATCH v2] integrity: track mtime in addition to i_version for assessment jlayton@redhat.com - 2017-07-12 03:20 +0200
Re: [PATCH v2] integrity: track mtime in addition to i_version for assessment Mimi Zohar <zohar@linux.vnet.ibm.com> - 2017-07-12 14:30 +0200
Re: [PATCH v2] integrity: track mtime in addition to i_version for assessment Bruce Fields <bfields@fieldses.org> - 2017-07-12 16:40 +0200
Re: [PATCH v2] integrity: track mtime in addition to i_version for assessment Mimi Zohar <zohar@linux.vnet.ibm.com> - 2017-07-12 20:00 +0200
Re: [PATCH v2] integrity: track mtime in addition to i_version for assessment bfields@fieldses.org (J. Bruce Fields) - 2017-07-11 18:20 +0200
Re: [PATCH v2] integrity: track mtime in addition to i_version for assessment Mimi Zohar <zohar@linux.vnet.ibm.com> - 2017-07-11 20:50 +0200
Re: [PATCH v2] integrity: track mtime in addition to i_version for assessment jlayton@poochiereds.net - 2017-07-12 02:40 +0200
csiph-web