[Linux-ima-user] IMA can not work with TPM driver

[xiaolin C. <xia...@gm...>]

hi,
Could anyone help me?

I use kernel-2.6.22.9.

Then I patch ibm-ima-patch-2.6.22.9.patch to the kernel.
New kernel compilation is ok.

What I have done:
1) make menuconfig
 a)  crypto->SHA1 is (y)
 b)  security->Default Linux Capabilities (n)
 c)  choose (y) for "TCG run-time Integrity Measurement Architecture"
 d)  choose (y) for "IMA test mode"
 e)  choose (*) for TPM hardware Support except atmel TPM interface
2）make
3) I reboot with  IMA=1 and Selinux=0


The system halts after the following message  is shown
tpm_tis tpm_tis : tpm_transmit : tpm_send : error 4294967234 .

Why the system can not start?    due to IMA TPM loading order ??


Thanks.
--bjtu


Restart with option




2. based on the patch downloaded the same kernel from kernel.org i.e.
linux-2.6.22.tar.gz..

3. copied both the files to /usr/src

4. uncompressed the kernel to get linux-2.6.22 directory in /usr/src

5. cd kernel directory

6. checked whether the patch works