New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Full IMA integration #2

Open

3 tasks

THS-on opened this issue Jun 3, 2022 · 0 comments

Assignees

Member

THS-on commented Jun 3, 2022

Add example IMA policy (measure nearly everything)
Integrate dm-verity attestation (requires https://lore.kernel.org/dm-devel/[email protected]/T/)
Add hook for live-build to attach IMA signatures

We are trying to use signatures instead of an hash allowlist, because the base Lernstick image allowlist is a couple MBs big.

THS-on self-assigned this

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment