本文介绍了在Linux系统中激活IMA和EVM验证模块的步骤，包括内核编译、设置启动选项、创建数字签名等。在尝试读取已签名和哈希文件时遇到'权限被拒绝'的错误，dmesg显示'无效的HMAC'。文章寻求关于此问题的原因和解决方案的帮助。
I am trying to activate IMA appraisal & EVM modules.
After compiling linux kernel 3.10.2 on my bt5R3 and setting kernel boot option in a first time like this:
GRUB_CMDLINE_LINUX="rootflags=i_version ima_tcb ima_appraise=fix ima_appraise_tcb evm=fix"
and after running this command to generate xattr security.ima and security.evm
find / \( -fstype rootfs -o -fstype ext4 \) -type f -uid 0 -exec head -c 1 '{}' \;
like this:
GRUB_CMDLINE_LINUX="rootflags=i_version ima_tcb ima_appraise=enforce ima_appraise_tcb evm=enforce"
I try to create digital signature of xattr like it's recommended on this tutorial Tutorial to IMA & EVM
Every steps have been followed, creating RSA keys, loading them early at boot in initramfs with keyctl.
Session Keyring
-3 --alswrv 0 65534 keyring: _uid_ses.0
977514165 --
最低0.47元/天 解锁文章
563
被折叠的 条评论
为什么被折叠?
到【灌水乐园】发言
