Re: [Linux-ima-user] Is this a chicken and egg problem or am I taking the wrong approach?

[Curtis V. <cr...@so...>]

I thought I should add a quick comment or two.

- I did forget to add i_version to the mount options on this image.
I believe that the syntax in fstab for i_version is actually "iversion".
and that this allows the ima function to "notice" a filesystem change
so that it will remeasure a changed file. So this probably was not 
my problem. (I have now added iversion to my fstab.)

- my boot partition was set up to not automount so it is possible that
it was not measured but should have been measured. (I have changed this for 
testing - but would prefer to leave /boot unmounted during normal operation.
This can help avoid having an unbootable system after power failures.)

-unfortunatly I have changed to a kernel with a custom policy so it will be 
a little while before I can retest the boot behavior I mentioned in the post.