Re: [Linux-ima-user] no ima or tpm0 measurements

[Nicolae P. <n.p...@gm...>]

For the record:


On CentOS 6.4, the correct set of boot options is:

ima=on ima_tcb

Using only ima=on results in an ima runtime measurement that only contains
the boot aggregate
Using only ima_tcb results in no ima runtime measurement log.

/Nicolae.


On 25 September 2013 18:51, Mimi Zohar <zo...@li...> wrote:

> On Wed, 2013-09-25 at 18:36 +0200, Nicolae Paladi wrote:
> > TCG_TPM is enabled:
> > cat /usr/src/kernels/2.6.32-358.118.1.openstack.el6.x86_64/.config | grep
> > CONFIG_TCG_TPM
> > CONFIG_TCG_TPM=y
> >
> > A possibly related issues I've noticed (after the system is restarted) is
> > this:
> >   service tcsd start
> >   insmod: error inserting
> >
> '/lib/modules/2.6.32-358.118.1.openstack.el6.x86_64/kernel/drivers/char/tpm/tpm_atmel.ko':
> > -1 No such device
> >   Starting tcsd:                                             [  OK  ]
> >
> > , however this issue should not be related to my problem as it it's
> > explained here:
> > http://support.lenovo.com/en_US/detail.page?DocID=HT076606
> > <http://support.lenovo.com/en_US/detail.page?DocID=HT076606>
> >
> >
> > tpm_selftest returns:
> >  TPM Test Results: 00
>
> At this point, I suggest you make sure that your Kconfig and kernel
> match.
>
> Mimi
>
>