Re: [Linux-ima-user] no ima or tpm0 measurements

[Andreas S. <and...@st...>]

Unfortunately Fedora 19 hasn't enabled CONFIG_IMA in their signed
kernel, so that neither ima=on nor ima_tcp has any effect. So
if you depend on Secure Boot to work there is currently no way
to test the IMA features.

Kind regards

Andreas

On 18.11.2013 16:24, Mimi Zohar wrote:
> On Mon, 2013-11-18 at 15:47 +0100, Nicolae Paladi wrote:
>> The IMA  wiki actually mentions this:
>>
>> IMA was first included in the 2.6.30 kernel. For distros that enable IMA by
>> default in their kernels, collecting IMA measurements simply requires
>> rebooting the kernel with the boot command line parameter 'ima_tcb'.
>> (Fedora/RHEL may also require the boot command line parameter 'ima=on'.)
>>
>> http://sourceforge.net/p/linux-ima/wiki/Home/
>>
>> So this is something (potentially) applicable to Fedora/RHEL/CentOS
> 
> Yes, thanks for the reminder.
> 
> Mimi
> 
> 
> ------------------------------------------------------------------------------
> DreamFactory - Open Source REST & JSON Services for HTML5 & Native Apps
> OAuth, Users, Roles, SQL, NoSQL, BLOB Storage and External API Access
> Free app hosting. Or install the open source package on any LAMP server.
> Sign up and see examples for AngularJS, jQuery, Sencha Touch and Native!
> http://pubads.g.doubleclick.net/gampad/clk?id=63469471&iu=/4140/ostg.clktrk
> _______________________________________________
======================================================================
Andreas Steffen                         and...@st...
strongSwan - the Open Source VPN Solution!          www.strongswan.org
Institute for Internet Technologies and Applications
University of Applied Sciences Rapperswil
CH-8640 Rapperswil (Switzerland)
===========================================================[ITA-HSR]==