CONFIG_IMA_KEXEC: Enable carrying the IMA measurement list across a soft boot

General informations

The Linux kernel configuration item CONFIG_IMA_KEXEC:

• prompt: Enable carrying the IMA measurement list across a soft boot
• type: bool
• depends on: CONFIG_TCG_TPM && CONFIG_HAVE_IMA_KEXEC
• defined in security/integrity/ima/Kconfig
• found in Linux kernels: 4.10–4.20, 5.0–5.19, 6.0–6.12, 6.13-rc+HEAD

Help text

TPM PCRs are only reset on a hard reboot. In order to validate a TPM's quote after a soft boot, the IMA measurement list of the running kernel must be saved and restored on boot.

Depending on the IMA policy, the measurement list can grow to be very large.

Hardware

LKDDb

Raw data from LKDDb:

• (none)

Sources

This page is automaticly generated with free (libre, open) software lkddb(see lkddb-sources).

The data is retrived from:

• Linux kernel
• Linux Kernel Driver DataBase (LKDDb)

Automatic links from Google (and ads)

Custom Search

Popular queries: