Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > linux.kernel > #1685943

Re: [PATCH v2] integrity: track mtime in addition to i_version for assessment

From Mimi Zohar <zohar@linux.vnet.ibm.com>
Newsgroups linux.kernel
Subject Re: [PATCH v2] integrity: track mtime in addition to i_version for assessment
Date 2017-07-12 20:00 +0200
Message-ID <u2u5B-2Sc-23@gated-at.bofh.it> (permalink)
References (5 earlier) <u0IcF-Hi-1@gated-at.bofh.it> <u1FPs-4Ta-21@gated-at.bofh.it> <u2etQ-1nU-5@gated-at.bofh.it> <u2oWe-8bN-9@gated-at.bofh.it> <u2qY1-YW-3@gated-at.bofh.it>
Organization linux.* mail to news gateway

Show all headers | View raw


On Wed, 2017-07-12 at 10:35 -0400, Bruce Fields wrote:
> On Wed, Jul 12, 2017 at 08:20:21AM -0400, Mimi Zohar wrote:
> > Right, currently the only way of knowing is by looking at the IMA
> > measurement list to see if modified files are re-measured or, as you
> > said, by looking at the code.
> 
> Who's actually using this, and do they do any kind of checks, or
> document the filesystem-specific limitations?

Knowing who is using it and how it is being used is the big question.
 I only hear about it when there are problems.

Over the years, there have been a number of Linux Security Summit
(LSS) talks, which have been mostly about embedded systems or locked
down systems, not so much for generic systems.

Examples include:

- Design and Implementation of a Security Architecture for Critical
Infrastructure Industrial Control Systems - David Safford, GE 2016

- IMA/EVM: Real Applications for Embedded Networking Systems - Petko
Manolov, Konsulko Group, and Mark Baushke, Juniper Networks 2015

- CC3: An Identity Attested Linux Security Supervisor Architecture
 - Greg Wettstein, IDfusion 2015

- The Linux Integrity Subsystem and TPM-based Network Endpoint
Assessment - Andreas Steffen, HSR University of Applied Sciences
Rapperswil, Switzerland 2012

Mimi

Back to linux.kernel | Previous | NextPrevious in thread | Next in thread | Find similar | Unroll thread


Thread

[PATCH v2] integrity: track mtime in addition to i_version for assessment Jeff Layton <jlayton@kernel.org> - 2017-07-07 16:10 +0200
  Re: [PATCH v2] integrity: track mtime in addition to i_version for  assessment Jeff Layton <jlayton@poochiereds.net> - 2017-07-07 19:00 +0200
    Re: [PATCH v2] integrity: track mtime in addition to i_version for  assessment Mimi Zohar <zohar@linux.vnet.ibm.com> - 2017-07-07 19:30 +0200
      Re: [PATCH v2] integrity: track mtime in addition to i_version for  assessment Jeff Layton <jlayton@redhat.com> - 2017-07-07 19:50 +0200
        Re: [PATCH v2] integrity: track mtime in addition to i_version for  assessment Mimi Zohar <zohar@linux.vnet.ibm.com> - 2017-07-07 22:10 +0200
          Re: [PATCH v2] integrity: track mtime in addition to i_version for  assessment Jeff Layton <jlayton@redhat.com> - 2017-07-07 22:40 +0200
            Re: [PATCH v2] integrity: track mtime in addition to i_version for  assessment Mimi Zohar <zohar@linux.vnet.ibm.com> - 2017-07-10 14:20 +0200
              Re: [PATCH v2] integrity: track mtime in addition to i_version for  assessment jlayton@redhat.com - 2017-07-12 03:20 +0200
                Re: [PATCH v2] integrity: track mtime in addition to i_version for  assessment Mimi Zohar <zohar@linux.vnet.ibm.com> - 2017-07-12 14:30 +0200
                Re: [PATCH v2] integrity: track mtime in addition to i_version for  assessment Bruce Fields <bfields@fieldses.org> - 2017-07-12 16:40 +0200
                Re: [PATCH v2] integrity: track mtime in addition to i_version for  assessment Mimi Zohar <zohar@linux.vnet.ibm.com> - 2017-07-12 20:00 +0200
  Re: [PATCH v2] integrity: track mtime in addition to i_version for  assessment bfields@fieldses.org (J. Bruce Fields) - 2017-07-11 18:20 +0200
    Re: [PATCH v2] integrity: track mtime in addition to i_version for  assessment Mimi Zohar <zohar@linux.vnet.ibm.com> - 2017-07-11 20:50 +0200
    Re: [PATCH v2] integrity: track mtime in addition to i_version for  assessment jlayton@poochiereds.net - 2017-07-12 02:40 +0200

csiph-web