• Tushar Sugandhi's avatar
    dm ima: update dm target attributes for ima measurements · 33ace4ca
    Tushar Sugandhi authored
    Certain DM targets ('integrity', 'multipath', 'verity') need to update the
    way their attributes are recorded in the ima log, so that the attestation
    servers can interpret the data correctly and decide if the devices
    meet the attestation requirements.  For instance, the "mode=%c" attribute
    in the 'integrity' target is measured twice, the 'verity' target is
    missing the attribute "root_hash_sig_key_desc=%s", and the 'multipath'
    target needs to index the attributes properly.
    
    Update 'integrity' target to remove the duplicate measurement of
    the attribute "mode=%c".  Add "root_hash_sig_key_desc=%s" attribute
    for the 'verity' target.  Index various attributes in 'multipath'
    target.  Also, add "nr_priority_groups=%u" attribute to 'multipath'
    target to record the number of priority groups.
    Signed-off-by: default avatarTushar Sugandhi <tusharsu@linux.microsoft.com>
    Suggested-by: default avatarThore Sommer <public@thson.de>
    Signed-off-by: default avatarMike Snitzer <snitzer@redhat.com>
    33ace4ca
dm-mpath.c 55.5 KB