Re: [Linux-ima-user] no ima or tpm0 measurements

[Mimi Z. <zo...@li...>]

On Wed, 2013-09-25 at 14:33 +0200, Nicolae Paladi wrote:
> Hi,
> 
> I'm using a CentOS 6.4 platform with the 2.6.32 kernel;
> 
> I boot with the following arguments:
> 
> ro root=/dev/mapper/myhost-root rd_NO_LUKS rd_LVM_LV=myhost/root
> LANG=en_US.UTF-8  KEYBOARDTYPE=pc KEYTABLE=sv-latin1 rd_NO_MD SYSFONT=lata
> rcyrheb-sun16 ima_tcb ima=on crashkernel=129M@0M rd_NO_DM rhgb quiet
> 
> tpm_version show the following:
>  TPM 1.2 Version Info:
> Chip Version:        1.2.8.28
> Spec Level:          2
> Errata Revision:     3
> TPM Vendor ID:       STM
> TPM Version:         01010000
> 
> 
> However, there is no output in the /sys/kernel/security/ directory;
> The BIOS settings are correct since there WAS an expected output when
> I was running on a Ubuntu platform.
> 
> Am I badly missing something here? Or is this a bug?
> 
> Thank you,
> /Nico

Make sure the TPM is builtin, not as a module, and IMA,EVM are enabled.

Mimi