On Tue, Sep 14, 2021 at 11:24:22AM -0400, Mimi Zohar wrote: > On Fri, 2021-09-10 at 15:47 -0300, Bruno Meneguele wrote: > > The default hash algorithm for evmctl is today hardcoded in the libimaevm.c > > file. To facilitate package maintainers across different distributions to > > set their own default hash algorithm this, patch adds the > > --with-default-hash=<algo> option to the configuration script. > > > > The chosen algorithm will then be checked by its available in the kernel, > > otherwise IMA won't be able to verify files hashed by the user. For that, > > the kernel header hash_info.h used as the source of supported hashes. In > > case the hash_info.h header is not present, the configuration script warns > > about it, but uses whatever the user specified in the option. > > > > Signed-off-by: Bruno Meneguele <bmeneg@xxxxxxxxxx> > > Thanks, Bruno. This patch set is now queued in the next-testing > branch. > > Mimi > Thanks Mimi. -- bmeneg PGP Key: http://bmeneg.com/pubkey.txt
Attachment:
signature.asc
Description: PGP signature
