Re: [Linux-ima-user] An IMA newbie question

[Mimi Z. <zo...@li...>]

On Tue, 2011-08-02 at 20:08 -0700, David Li wrote:
> Hi,
> 
> I am new to TPM and IMA. I followed the following instructions :
> 
> http://linux-ima.sourceforge.net/
> 
> to compile the test code.  I got the following error in running
> ima_measure:
> 
> -bash-4.1# ./ima_measure  /sys/kernel/security/tpm0/binary_bios_measurements --verbose
> ### PCR HASH                                  TEMPLATE-NAME
>   0 000  08 00 00 00 29 8D F1 25 B2 60 EF 64 20 1B DF 08 15 C0 03
> 87248900926 ERROR: event name too long!
> 
> Now I don't have a clue about the file name length 87248900926. 
> 
> Can anyone help to explain?

The entire record is bogus.  Is IMA enabled?  The output should look
something like:
### PCR HASH                                  TEMPLATE-NAME
  0 010  1A 44 67 C5 8D 55 4B 75 EB EF 6F 90 02 C4 EE E6 95 61 71 B5 ima  2A C8 
DF A1 69 23 65 5E F1 A6 48 87 21 EB 9F 97 2C 23 F1 12 boot_aggregate

Which kernel are you running (uname -r)?  What boot command line
parameters did you supply (cat /proc/cmdline)?

thanks,

Mimi