|
From: Stefan B. <st...@li...> - 2011-03-16 18:32:44
|
On 03/16/2011 02:29 PM, Mimi Zohar wrote:
> On Thu, 2011-03-17 at 01:20 +0800, Qingping Hou wrote:
>> Hi all,
>>
>> I am currently learning how to make use of ima. After compile the
>> kernel according to the official document, I can now get the measured
>> hash value from ascii_runtime_measurements file.
> IMA was upstreamed in 2.6.30. At this point, depending on the Linux
> distro, you might not need to recompile the kernel. From the boot
> command line, specifying ima_tcb should enable IMA.
>
>> However, I cannot fine tpm0 file in /sys/kernel/security/ directory.
>> Actually I am using tpm-emulator, not a real tpm device. Could that be
>> the cause?
Unless the TPM emulator was running inside the kernel and hooked itself
into the main tpm.c driver of Linux and thus could make a /dev/tpm0
available to userspace, you won't be able to use that emulator as a
replacement for a read hardware TPM device. So, yes, that's likely the
cause.
Stefan
>> Best regards,
>>
>> Hou Qingping
> Yes, it depends on the TPM emulator. Which emulator are you using?
> Others on this mailing list should be able to help you.
>
> thanks,
>
> Mimi
>
|