Re: [LTP] [PATCH] ima: skip verifying TPM 2.0 PCR values

[Jerry Snitselaar <jsnitsel@xxxxxxxxxx>]

On Fri Oct 25 19, Petr Vorel wrote:
> Hi,
>
> > /sys/kernel/security/tpmX/major_version (on fedora and rhel at least, is it elsewhere on other distros?)
>
> > versus
>
> > /sys/class/tpm/tpmX/major_version
>
> Is it more HW related (/sys/class/tpm/tpmX) or LSM related
> (/sys/kernel/security/tpmX)?
> I guess /sys/kernel/security/tpmX might be better.

I think it is HW related since it is describing the
TCG version that the chip implements.

> Thanks for implementing this, I'll try to test it soon.
>
> Kind regards,
> Petr