Re: [Linux-ima-user] Storing/Accessing SML Values...

[Dmitry K. <d.k...@sa...>]

Hi,

use copy command:

cp /sys/kernel/security/ima/ascii_runtime_measurements /usr/share/abc.log

Then send  /usr/share/abc.log as you wish...

- Dmitry

On 18/06/14 07:03, M.AMJAD wrote:
> Hello,
>         i create a file abc.log via touch (/usr/share/abc.log), then i
> applied your suggested command
> "cat securityfs /system/kernel/security/ima/ascii_runtime_measurements
> /usr/share/abc.log"
>
> it produce the following like output
>
>
>
> 10 0000000000000000000000000000000000000000 ima
> 0000000000000000000000000000000000000000 utmp
> 10 0000000000000000000000000000000000000000 ima
> 0000000000000000000000000000000000000000 utmp
> 10 0000000000000000000000000000000000000000 ima
> 0000000000000000000000000000000000000000 utmp
> 10 0000000000000000000000000000000000000000 ima
> 0000000000000000000000000000000000000000 utmp
> 10 0000000000000000000000000000000000000000 ima
> 0000000000000000000000000000000000000000 utmp
> 10 fa86a27f42339a114b7cc783b4f8eecc86a03ef5 ima
> da39a3ee5e6b4b0d3255bfef95601890afd80709 .xauthVSegIB
> 10 941cc961977997331b356bd351fd118fa997865a ima
> da39a3ee5e6b4b0d3255bfef95601890afd80709 joe.log
> 10 0000000000000000000000000000000000000000 ima
> 0000000000000000000000000000000000000000 utmp
> 10 0000000000000000000000000000000000000000 ima
> 0000000000000000000000000000000000000000 utmp
> 10 b1f61a7ee0ab98d602efb2b6082e175d05fb96d9 ima
> da39a3ee5e6b4b0d3255bfef95601890afd80709 abc.log
> 10 9ca77a51309afcd364da46441c8f340a85ee451a ima
> 21e9a21b4244e9e5ddb7503f7e27d37a5793ad48 /bin/vi
> 10 10f8e161c760375b52ee648c17c7edba81f00459 ima
> ddcbcf9392dbdde58c43533bf5e8c59b8ec9f3f2 virc
>
>
> but i need to store a hash (SML) in a file like abc.log so that i can
> transfer it to a remote server, please .
>
>         
> M.AMJAD
> +92-345-9208119
> Please consider the environment before printing
>
>
> On Tuesday, 17 June 2014, 17:54, Mimi Zohar <zo...@li...>
> wrote:
>
>
> On Mon, 2014-06-16 at 21:12 -0700, M.AMJAD wrote:
>
> > Hello everyone,
> >    i am new to IMA, i can see the integrated, boot etc hashes but how
> > to store these hashes as a SML file on hard disk, and where , please.
>
>
> Redirect the measurement list output:
> cat <securityfs>/ima/ascii_runtime_measurements > <pathname>
>
> Mimi
>
>
>
>
>
>
> ------------------------------------------------------------------------------
> HPCC Systems Open Source Big Data Platform from LexisNexis Risk Solutions
> Find What Matters Most in Your Big Data with HPCC Systems
> Open Source. Fast. Scalable. Simple. Ideal for Dirty Data.
> Leverages Graph Analysis for Fast Processing & Easy Data Exploration
> http://p.sf.net/sfu/hpccsystems
>
>
> _______________________________________________
> Linux-ima-user mailing list
> Lin...@li...
> https://lists.sourceforge.net/lists/listinfo/linux-ima-user