Re: [Linux-ima-user] starting with IMA

[Shaz <sha...@gm...>]

On Thu, Jun 24, 2010 at 5:45 PM, chloé Fouquet <fou...@gm...>wrote:

> Hi,
> I'm new in using IMA with a TPM. Is there somewhere a good tutorial from
> the installation to the use ?
> I have a ubuntu version 9.04 with a kernel 2.6.28. I didn't find any patch
> for that kernel on sourceforge, do I need to compile a more recent kernel
> like 2.6.30 that has the IMA option ?
> Do I need TrustedGrub to have IMA ? In that case it will only work with
> grub1 and not grub2 right ?
>
>
Trusted grub gives you a complete chian of trust so it is important but you
can skip it if you are just having fun with IMA because IMA does not depend
on it. Trusted grub implements IMA as well.

Not sure what you mean by grub1 and grub2 but you will be using trusted grub
instead of standard distro provided grub if you go for the complete chain of
trust. The backporting will work but it will be difficult to handle as the
patches need to be applied from multiple sources. The filesystem code is
also a bit different between 2.6.30 and the earlier kernels so go for a more
recent kernel that is available from Ubuntu repositories like the 2.6.32.

Good luck.

-- 
Shaz