Menu
▾
▴
Re: [Linux-ima-user] How to read the xxxx_runtime_measurements
|
From: Reiner S. <sa...@us...> - 2007-07-30 15:33:07
|
Hi Saurabh, I assume Java has problems reading the sysfs pseudo-device file. I experienced similar problems when trying 'scp' (secure copy from remote). Till shows a simple workaround that work fine. Another solution could be using the TrouSerS open-source software stack (http://trousers.sourceforge.net/). To my knowledge you can get both the TPM and the IMA measurements through TrouSerS. Another team in Europe developed a java wrapper for the TrouSerS c-library at http://trustedjava.sourceforge.net (I did not try it yet). This team also shows a full stand-alone java TSS stack on their web site but I do not know if this TSS supports IMA measurements. If you install a TSS stack, it helps you to get other services from the TPM as well, such as quotes. Reiner __________________________________________________________ Reiner Sailer, Research Staff Member, Secure Systems Department IBM T J Watson Research Ctr, 19 Skyline Drive, Hawthorne NY 10532 Phone: 914 784 6280 (t/l 863) Fax: 914 784 6205, sa...@us... http://www.research.ibm.com/people/s/sailer/ "Saurabh Arora" <tan...@gm...> Sent by: lin...@li... 07/30/2007 08:17 AM Please respond to sau...@ie... To ti...@on... cc lin...@li... Subject Re: [Linux-ima-user] How to read the xxxx_runtime_measurements Hello Till On 7/30/07, Till Bentz <ti...@on...> wrote: > Hello, > > I was wondering if someone could help me with figuring out how to read the > xxxx_runtime measurements from inside a Java program. I implemented a Java > tool, that does the TPM quote. Now I want to read the measurements done by > IMA but I somehow can't read the file. I think a problem might be that the > file has a size of 0 and therefore is not readable with Java (?) to do the same, I used linux command line inside my java program, like this : ------------ String[] cmdArray = {"cp", "/sys/kernel/security/ima/ascii_runtime_measurements", "/root/iml.txt"}; Runtime.getRuntime().exec(cmdArray); ------------ and then use the iml txt file as you wish to. HTH best Saurabh ------------------------------------------------------------------------- This SF.net email is sponsored by: Splunk Inc. Still grepping through log files to find problems? Stop. Now Search log events and configuration files using AJAX and a browser. Download your FREE copy of Splunk now >> http://get.splunk.com/ _______________________________________________ Linux-ima-user mailing list Lin...@li... https://lists.sourceforge.net/lists/listinfo/linux-ima-user |
