Re: [Linux-ima-user] boot aggregate measure

[Nayna <na...@li...>]

On 06/08/2017 02:25 PM, Micka wrote:
> Hi,
>
> I would like to know what boot aggregate measure means ?

It is an aggregated hash of PCRS 0-7.

>
> I have a problem, my PCR 10 is changing every time I reboot my device:
>
> 10 ddee6404dc3bd4ee300406cd93181c5a2187b59b ima-ng
> sha1:9797edf8d9eed36b1cf92547816a51c8af4e45ee boot_aggregate
>

You can verify your boot_aggregate by using the test scripts from 
package ltp-ima-standalone-v2.tar.gz as available on:
https://sourceforge.net/projects/linux-ima/

Steps to use it are specified in below link:
http://linux-ima.sourceforge.net/linux-ima-measurements.html

Thanks & Regards,
     - Nayna

> I have only activated: ima_audit=1
>
> Michael Musset,
>
>
> ------------------------------------------------------------------------------
> Check out the vibrant tech community on one of the world's most
> engaging tech sites, Slashdot.org! http://sdm.link/slashdot
>
>
>
> _______________________________________________
> Linux-ima-user mailing list
> Lin...@li...
> https://lists.sourceforge.net/lists/listinfo/linux-ima-user
>