Hi Petr, On Mon, 2020-10-19 at 19:10 -0400, Mimi Zohar wrote: > On Mon, 2020-10-19 at 22:08 +0200, Petr Vorel wrote: > > This is required, because when TPM HW available (i.e. -c /dev/tpm0), > > evmctl ima_boot_aggregate returns sha1:xxxx. > > > > skip requires to move cleanup(). > > > > Signed-off-by: Petr Vorel <petr.vorel@xxxxxxxxx> > > Nice. > > --- > > Hi Mimi, > > > > this Fixes problems on current Debian, which has still disabled CONFIG_IMA > > (FYI [1]). I was not able to figure out how to get it working with > > sample-* files, but maybe there is a way. Moving the test down to within "if [ "$(id -u)" = 0 ] && [ -c "/dev/tpm0" ]; then" will allow the sample tests to work. I've modified your patch and pushed it out to next-testing. thanks, Mimi
