Re: [Linux-ima-user] How can I make kernel loads a signature from a .sig file ?

[Rock L. <roc...@gm...>]

>
> You can't, but yesterday Thiago Bauermann posted patches for adding
> appended signature support.
>

Wow, it's really a good news. I was looking for a perfect way for
upgrading purpose (through network). And I found IMA is a good way to
support my goals. But IMA stores signature in xattr which is not very
convenient for me to upgrade my device. Because xattrs are seperate
from the real file data and it can be lost easily, so I need to keep
the xattrs carefully. But with the appended signature featues,
signature is treated as a part of file data, I don't need to worry
about the xattrs things. Did I miss something ?

BTW,  do the .sig files used for appended signatures feature? And how
can I generate a file with append signature ?

-- 
Cheers,
Rock