dh/ima-evm-utils-mirror
1
0
Fork 0
mirror of https://git.code.sf.net/p/linux-ima/ima-evm-utils synced 2025-09-17 17:35:20 +02:00
Code Releases Activity

ima-evm-utils: support verifying the measurement list using multiple keys

Browse Source 
On a running system, different software packages might be signed by
different parties.  Support verifying signatures in the measurement
list using multiple public keys(eg.  -k "key1, key2, ...").

Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>
This commit is contained in:
Mimi Zohar
2018-01-16 23:31:49 -05:00
parent 838b08b449
commit 9c79b7de72
4 changed files with 76 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
src/evmctl.c
View File

@@ -1419,6 +1419,10 @@ static int ima_measurement(const char *file)
return -1;
}
/* Support multiple public keys */
if (params.keyfile)
init_public_keys(params.keyfile);
while (fread(&entry.header, sizeof(entry.header), 1, fp)) {
ima_extend_pcr(pcr, entry.header.digest, SHA_DIGEST_LENGTH);