Re: [Linux-ima-user] IMA & Centos 6.2 - timely response will be very much appreciated

[Seiji M. <sei...@gm...>]

Hi

On Sat, Feb 25, 2012 at 3:57 AM, William Rettig <wr...@tr...> wrote:
> I’d to know that I can trust the integrity of the boot chain.  It looks like
> I will be fine with the 2.6.32 kernel.  However, I’m not exactly sure what I
> will have to do to GRUB.  It looks to me like I need to build
> TrustedGRUB1.1.5 and follow the guidance on its Wiki.  What I don’t see
> there is a solid test for the entire boot chain.   My TPM 1.2 appears to be
> working with 2.6.32 and tpm-tools fine.

OpenPTS provide a validation of transitive trust chain.
but it has limitation depend on BIOS and IPL.
Supported configurations are;
- Legacy BIOS + GRUB legacy with GRUB-IMA patch
- Legacy BIOS + tboot (Intel TXT)
- UEFI BIOS + tboot (Intel TXT)

What hardware (vendor, machine type) are you using now?

regards,
--
Seiji