Hi Mimi, I would like to make sure I understood your feedback.
Why duplicate the certificate info on each record in the measurement list? Why not add the certificate info once, as the key is loaded onto the .ima and .platform keyrings? Mimi
key_create_or_update function in security/keys/key.c is called to add\update a key to a keyring. Are you suggesting that an IMA function be called from here to add the certificate info to the IMA log?
Our requirement is that the key information is available in the IMA log which is TPM backed.
Thanks, -lakshmi
