> On Mon, 2020-08-17 at 15:09 +0200, Petr Vorel wrote: > > Hi Mimi, Lakshmi, > > changes v2->v3: > > fixed regression in my third commit. > > (please verify it on installed LTP, or at least run make install in > > testcases/kernel/security/integrity/ima/datafiles/ima_keys/) > I did, but nothing changed. I probably need to set an environment > variable. You also need to set LTPROOT (prefix, e.g. /opt/ltp). > After building and installing LTP, it's finding the file, but some of > the issues still exist: > ima_keys 1 TINFO: $TMPDIR is on tmpfs => run on loop device > ima_keys 1 TINFO: Formatting /dev/loop0 with ext3 extra opts='' > ima_keys 1 TINFO: verify key measurement for keyrings and templates specified in IMA policy > grep: Unmatched ( or \( This should be fixed by v3 (fixed by for loop and sort -u) https://patchwork.ozlabs.org/project/ltp/patch/20200817130916.27634-5-pvorel@xxxxxxx/ But I'll test it tomorrow with your IMA policy. Thank you for testing! Kind regards, Petr > ima_keys 1 TPASS: specified keyrings were measured correctly > ima_keys 2 TINFO: verify measurement of certificate imported into a keyring > keyctl_session_to_parent: Operation not permitted > ima_keys 2 TPASS: logged certificate matches the original > IMA policy: > measure func=KEY_CHECK keyrings=.ima|.evm|.builtin_trusted_keys|.blacklist|key_import_test template=ima-buf > measure func=KEY_CHECK keyrings=key_import_test template=ima-buf > Mimi
