[dm-devel] [PATCH 0/6] updates to device mapper target measurement using ima
Tushar Sugandhi
tusharsu at linux.microsoft.com
Fri Aug 13 21:37:55 UTC 2021
There were several improvements suggested for the original device mapper
target measurement patch series [1].
Those improvement suggestions include:
- Prefixing hashes for the DM tables being measured in ima log with the
hash algorithm.
- Adding version information for DM related events being measured in the
ima log.
- Prefixing DM related event names with "dm_".
- Including the verity target attribute - "root_hash_sig_key_desc"
in the ima measurement log.
This series incorporates the above suggestions.
This series also has the following fixes:
- Adding a one-time warning to dmesg during dm_init if
CONFIG_IMA_DISABLE_HTABLE is set to 'n'.
- Updating 'integrity' target to remove the duplicate measurement of
the attribute "mode=%c".
- Indexing various attributes in 'multipath' target, and adding
"nr_priority_groups=%u" attribute to the measurements.
- Fixing 'make htmldocs' warnings in dm-ima.rst.
- Adding missing documentation for the targets - 'cache', 'integrity',
'multipath', and 'snapshot' in dm-ima.rst.
- Updating dm-ima.rst documentation with the grammar for various DM
events and targets in Backus Naur form.
- Updating dm-ima.rst documentation to be consistent with the code
changes described above.
This series is based on top of the following git repo/branch/commit:
Repo: https://git.kernel.org/pub/scm/linux/kernel/git/device-mapper/linux-dm.git
Branch: dm-5.15
Commit: commit 5a2a33884f0b ("dm crypt: Avoid percpu_counter spinlock contention in crypt_page_alloc()")
[1] https://patchwork.kernel.org/project/dm-devel/cover/20210713004904.8808-1-tusharsu@linux.microsoft.com/
Tushar Sugandhi (6):
dm ima: prefix dm table hashes in ima log with hash algorithm
dm ima: add version info to dm related events in ima log
dm ima: prefix ima event name related to device mapper with dm_
dm ima: add a warning in dm_init if duplicate ima events are not
measured
dm ima: update dm target attributes for ima measurements
dm ima: update dm documentation for ima measurement support
.../admin-guide/device-mapper/dm-ima.rst | 827 +++++++++++++-----
drivers/md/dm-ima.c | 94 +-
drivers/md/dm-ima.h | 10 +
drivers/md/dm-integrity.c | 1 -
drivers/md/dm-mpath.c | 26 +-
drivers/md/dm-verity-target.c | 2 +
drivers/md/dm.c | 6 +
7 files changed, 724 insertions(+), 242 deletions(-)
--
2.32.0
More information about the dm-devel
mailing list