On 3/29/23 04:58, Denis Semakin wrote:
This patch allows to read measurement lists of child namespaces form init IMA namespace in order to obtain the values of hashes to perform operations and procedures of remote attestation.
I supposed this type of support would go onto the next stage (current posted 'stage' is auditing support, next would be measurement support)? Stefan
Denis Semakin (1): ima: obtain child measurement list from init namespace security/integrity/ima/ima.h | 1 + security/integrity/ima/ima_fs.c | 164 ++++++++++++++++++++++- security/integrity/ima/ima_init_ima_ns.c | 2 + security/integrity/ima/ima_ns.c | 31 +++++ 4 files changed, 193 insertions(+), 5 deletions(-)