Support for the original IMA LTP "--verify" and "--validate" options was just added in version 1.3.0. - Verifying the template data digest against the value stored in the IMA measurement list should not be optional. Drop "--verify". - Walking the IMA measurement list to validate the PCRs should not by default "fix" the file integrity violations. Rename the "--validate" option to "--ignore-violations", clafifying its purpose. Mimi Zohar (3): Drop the ima_measurement "--verify" option Rename "--validate" to "--ignore-violations" Update the ima_boot_aggregate apsects of the "README" and "help" files README | 6 +++--- src/evmctl.c | 36 +++++++++++++++--------------------- 2 files changed, 18 insertions(+), 24 deletions(-) -- 2.18.4
