CONFIG_IMA: Integrity Measurement Architecture(IMA)

General informations

The Linux kernel configuration item CONFIG_IMA:

• prompt: Integrity Measurement Architecture(IMA)
• type: bool
• depends on: (none)
• defined in security/integrity/ima/Kconfig
• found in Linux kernels: 2.6.30–2.6.39, 3.0–3.19, 4.0–4.20, 5.0–5.19, 6.0–6.8, 6.9-rc+HEAD

Help text

The Trusted Computing Group(TCG) runtime Integrity Measurement Architecture(IMA) maintains a list of hash values of executables and other sensitive system files, as they are read or executed. If an attacker manages to change the contents of an important system file being measured, we can tell.

If your system has a TPM chip, then IMA also maintains an aggregate integrity value over this list inside the TPM hardware, so that the TPM can prove to a third party whether or not critical system files have been modified. Read https://www.usenix.org/events/sec04/tech/sailer.html to learn more about IMA. If unsure, say N.

Hardware

LKDDb

Raw data from LKDDb:

• (none)

Sources

This page is automaticly generated with free (libre, open) software lkddb(see lkddb-sources).

The data is retrived from:

• Linux kernel
• Linux Kernel Driver DataBase (LKDDb)

Automatic links from Google (and ads)

Custom Search

Popular queries: