Re: [Linux-ima-user] ima-ng template

[Ken G. <kg...@li...>]

> On Mon, 2017-03-06 at 11:43 +0000, Micka wrote:
>>
>> Why I have only PCR-10 working in my TPM ? How can I have other PCRs ?

If your question is "Why does IMA use one PCR?  Why not multiple PCRS?"

PCRs are a scarce resource on the TPM.  There are only 24, and most are 
already assigned. Generally, one would use multiple PCRs when you want 
to seal/unseal to a subset of the measurements.

Since it's unlikely that one could seal to the IMA measurements (because 
multi-threading changes the order each time), I don't see a rationale 
for using more than one PCR.