On Fri, 2025-03-07 at 11:24 +0100, Petr Vorel wrote: > Hi Mimi, Ignaz, > > > Proof of concept, it was never fixed in the kernel. > > Instead we should have some basic EVM tests. > > gently ping. Is evm_overlay.sh test useful for you? > Otherwise I'll delete it. Requiring the "ima_policy=appraise_tcb" default policy to run the tests limits its usefulness. Perhaps REQUIRED_POLICY_CONTENT could be defined. I'll let you know. For now, please don't remove the test. thanks, Mimi
