Re: [PATCH 1/2] ima: use the IMA configured hash algo to calculate the boot aggregate

[Petr Vorel]

Hi Mimi,

Reviewed-by: Petr Vorel <pvorel@xxxxxxx>

> The original LTP ima_boot_aggregate.c test needed to be updated to
> support TPM 2.0 before this change.  For TPM 2.0, the PCRs are not
> exported.  With this change, the kernel could be reading PCRs from a
> TPM bank other than SHA1 and calculating the boot_aggregate based on a
> different hash algorithm as well.  I'm not sure how a remote verifier
> would know which TPM bank was read, when calculating the boot-
> aggregate.
Mimi, do you plan to do update LTP test?

Kind regards,
Petr