Re: [Linux-ima-user] Extended verification module (EVM) and IMA

[Mimi Z. <zo...@li...>]

On Fri, 2009-09-18 at 10:09 +0200, Roberto Sassu wrote: 
> Hi all
> 
> i downloaded the old IBM "tpm" package and i see that the "EVM" module grants 
> extended attribute integrity for files, but it's is implemented only for 2.6.20 
> kernel series. There's a plan to integrate such feature together with IMA in 
> the mainline?
> Thanks in advance.

Yes and no. Now that IMA is in the mainline Linux kernel, we are
planning on adding the EVM functionality - integrity appraisal of
data/metadata. There were some performance issues with the original
design, which we first need to address. So no, it isn't a simple port.

Mimi