Re: [Linux-ima-user] boot aggregate measure

[Nayna <na...@li...>]

On 06/10/2017 03:39 PM, Micka wrote:
> Thx, but my PCRS 0-7 are set to zero for the moment. I don't have yet a
> secure boot. Is it the secure boot that provide the PCRS 0-7?
>

Trusted boot will provide PCRS 0-7.
Did you try to execute the ima-tests which I shared and verified ?

Thanks & Regards,
       - Nayna

>
> Micka,
>
> Le ven. 9 juin 2017 à 15:43, Nayna <na...@li...
> <mailto:na...@li...>> a écrit :
>
>
>
>     On 06/08/2017 02:25 PM, Micka wrote:
>      > Hi,
>      >
>      > I would like to know what boot aggregate measure means ?
>
>     It is an aggregated hash of PCRS 0-7.
>
>      >
>      > I have a problem, my PCR 10 is changing every time I reboot my
>     device:
>      >
>      > 10 ddee6404dc3bd4ee300406cd93181c5a2187b59b ima-ng
>      > sha1:9797edf8d9eed36b1cf92547816a51c8af4e45ee boot_aggregate
>      >
>
>     You can verify your boot_aggregate by using the test scripts from
>     package ltp-ima-standalone-v2.tar.gz as available on:
>     https://sourceforge.net/projects/linux-ima/
>
>     Steps to use it are specified in below link:
>     http://linux-ima.sourceforge.net/linux-ima-measurements.html
>
>     Thanks & Regards,
>           - Nayna
>
>      > I have only activated: ima_audit=1
>      >
>      > Michael Musset,
>      >
>      >
>      >
>     ------------------------------------------------------------------------------
>      > Check out the vibrant tech community on one of the world's most
>      > engaging tech sites, Slashdot.org! http://sdm.link/slashdot
>      >
>      >
>      >
>      > _______________________________________________
>      > Linux-ima-user mailing list
>      > Lin...@li...
>     <mailto:Lin...@li...>
>      > https://lists.sourceforge.net/lists/listinfo/linux-ima-user
>      >
>