[Linux-ima-user] measurereq replacement

[Nicolai K. <nic...@si...>]

Dear all,

within an ongoing research project we have the need to measure specific 
files like configuration files or disk images. Up to now we are using 
the /ima/measurereq file to announce the measurement.

Do to performance restrictions we are not able to move to the 
measurement of all files accessed by a certain user. Unfortunately, I 
can not see how to model the measurement of a set of specific files in 
the given policy language.

Is there an example available?

Best regards,
Nicolai
-- 
Nicolai Kuntze (Dipl.-Inform.)
Department "Secure Mobile Systems (SIMS)"

My signature is certified by Fraunhofer Certification Authority:
http://pki.fraunhofer.de/FhG-CA-Certs/FhG-CA_v2_cert.der

Addr:   Fraunhofer-Institute for Secure Information Technology SIT
         Rheinstrasse 75, 64295 Darmstadt, Germany
WWW:    http://www.sit.fraunhofer.de
Tel:    +49-(0)6151/869-276
Fax:    +49-(0)6151/869-224