---------- Forwarded message ----------
From: Chaskiel Grundman
Date: Fri, Feb 22, 2008 at 3:49 PM
Subject: ima on x86_64?
I have been trying to get an ima-enabled 2.6.22 kernel working on my x86_64 laptop. However, it tends to crash during modprobe operations that the initramfs does.
There are two common errors:
one is a page fault in ima_lookup_measure_entry. it appears that a bad pointer is found in the list.
The other kind of fault occurs in various parts of the vmalloc code. These are more variable, but the usual case is that a general protection fault occurs in __free_pages or __get_vm_area_node because a pointer has invalid syntax (current x86_64 cpu's don't have true 64 bit pointers. the upper 17 bits of pointers must either be all 0 or all 1)
Neither problem occurs if the kernel is booted with ima=0 instead of ima=1.
Is anyone using ima on x86_64? What kernel version/ima patch?