[Linux-ima-user] Fwd: ima on x86_64?

[Chaskiel G. <cgr...@gm...>]

(I have since figured out that enabling CONFIG_DEBUG_SLAB works around the
crash, but I'd still like to know if other people are using ima on x86_64 or
have had this problem)

---------- Forwarded message ----------
From: Chaskiel Grundman <cgr...@gm...>
Date: Fri, Feb 22, 2008 at 3:49 PM
Subject: ima on x86_64?
To: lin...@li...


I have been trying to get an ima-enabled 2.6.22 kernel working on my x86_64
laptop. However, it tends to crash during modprobe operations that the
initramfs does.

There are two common errors:

one is a page fault in ima_lookup_measure_entry. it appears that a bad
pointer is found in the list.
The other kind of fault occurs in various parts of the vmalloc code. These
are more variable, but the usual case is that a general protection fault
occurs in __free_pages or __get_vm_area_node because a pointer has invalid
syntax (current x86_64 cpu's don't have true 64 bit pointers. the upper 17
bits of pointers must either be all 0 or all 1)

Neither problem occurs if the kernel is booted with ima=0 instead of ima=1.

Is anyone using ima on x86_64? What kernel version/ima patch?

Thanks