Re: [Linux-ima-user] Deadlock after enabling EVM in fix mode

[Mimi Z. <zo...@li...>]

On Fri, 2014-02-07 at 15:37 +0000, Lipinski, MarekX wrote: 
> I found out I had CONFIG_TRUSTED_KEYS not set (as I do not have TPM in my box). 
> I enabled trusted keys in the configuration. Now once init is reached hmac(sha1) is already
> registered and EVM works fine, no deadlock anymore. I guess either EVM support should depend
> on TRUSTED_KEYS, or the registration of hmac(sha1) should be enforced before enabing EVM. 

Thanks MarekX for the bug report.  Now that IMA supports large digests,
this issue might be more pervasive than just EVM's dependency on SHA1. 

thanks,

Mimi