[Linux-ima-user] Reliability of IMA/EVM against power failure

[Lipinski, M. <mar...@in...>]

Hi,

I was wondering what are the possible problems for the IMA appraise/EVM-enabled system in case of sudden power failure or system crash.

Is it possible that we end up having a new content written to the file and IMA or EVM hash not correctly updated causing Permission denied after reboot?
Assuming file system integrity is ok or it was fixed by the fsck.

Regards,
Marek

Intel GmbH
Dornacher Strasse 1
85622 Feldkirchen/Muenchen, Deutschland
Sitz der Gesellschaft: Feldkirchen bei Muenchen
Geschaeftsfuehrer: Christian Lamprechter, Hannes Schwaderer, Douglas Lusk
Registergericht: Muenchen HRB 47456
Ust.-IdNr./VAT Registration No.: DE129385895
Citibank Frankfurt a.M. (BLZ 502 109 00) 600119052