Hi Mimi,
NOTE: this is for systems with TPM 1.2 (not for system without any TPM).
> On Thu, 2020-06-18 at 20:10 +0200, Petr Vorel wrote:
> > For both kernel with and without CONFIG_IMA=y.
> > NOTE: ima_boot_aggregate was added in dc00c92, without TPM 2.0
> > it just reported:
> > EVP_DigestInit() failed
> > (null):
> > Fixes: 917317a ("ima_evm_utils: emit the per TPM PCR bank
> > "boot_aggregate" values")
> > Signed-off-by: Petr Vorel <pvorel@xxxxxxx>
> I don't have a problem with accepting this solution, but I think the
> real problem is that hash_info.h is not included in the kernel-
> headers package on the system. One solution would be to include a
> default hash_info.h file in ima-evm-utils and fall back to using it.
Thanks for a quick answer. I'm not sure if this is a best approach.
But I have /usr/include/linux/hash_info.h on all systems
I tested (4.15 from openSUSE and 5.6.13 on Debian).
Kind regards,
Petr
