Re: [Linux-ima-user] Dual signing for IMA files

[Mimi Z. <zo...@li...>]

On Thu, 2017-02-16 at 21:27 +0000, Jeff Hewett (jhewett) wrote:
> Has anyone considered dual signing for IMA files? I'm exploring a use
> case for this and just wondering if it has been discussed in the past
> or if others have this need. Currently, only a single signature is
> supported on files.

No, it has not been discussed yet on the mailing lists.  Ii realize it's
not the same as having multiple signature support, but the ima-evm-utils
git repo next branch has support for writing a detached signature as a
security.ima xattr.  Refer to commit 233dedf  "Write out .sig file as
security.ima xattr". 

Mimi