(I have since figured out that enabling CONFIG_DEBUG_SLAB works around the crash, but I'd still like to know if other people are using ima on x86_64 or have had this problem)

---------- Forwarded message ----------
From: Chaskiel Grundman <cgrundman@gmail.com>
Date: Fri, Feb 22, 2008 at 3:49 PM
Subject: ima on x86_64?
To: linux-ima-users@lists.sourceforge.net

I have been trying to get an ima-enabled 2.6.22 kernel working on my x86_64 laptop. However, it tends to crash during modprobe operations that the initramfs does.

There are two common errors:

one is a page fault in ima_lookup_measure_entry. it appears that a bad pointer is found in the list.
The other kind of fault occurs in various parts of the vmalloc code. These are more variable, but the usual case is that a general protection fault occurs in __free_pages or __get_vm_area_node because a pointer has invalid syntax (current x86_64 cpu's don't have true 64 bit pointers. the upper 17 bits of pointers must either be all 0 or all 1)

Neither problem occurs if the kernel is booted with ima=0 instead of ima=1.

Is anyone using ima on x86_64? What kernel version/ima patch?