Re: [PATCH v9 1/7] ima: copy only complete measurement records across kexec

From: Mimi Zohar
Date: Tue Mar 04 2025 - 21:08:44 EST


On Tue, 2025-03-04 at 11:03 -0800, steven chen wrote:
>
> - Compared the memory size allocated with memory size of the entire
> measurement record. Copy only complete measurement records if there
> is enough memory. If there is not enough memory, it will not copy
> any IMA measurement records, and this situation will result in a
> failure of remote attestation.

In discussions with Tushar, I was very clear that as many measurement records as
possible should be carried over to the kexec'ed kernel. The main change between
v8 and v9 was to make sure the last record copied was a complete record.

Mimi