Re: [PATCH RFC 00/20] attestation: Add a common subsystem and TDX support

[Jason Gunthorpe]

On Thu, Oct 22, 2026 at 03:37:46PM -0400, Mimi Zohar wrote:

> > Advisory entries shouldn't matter with a scheme like this.
> 
> IMA has something called violations (e.g. open-writers, ToMToU), which are more
> than just advisory.  They intentionally invalidate the IMA measurement list
> since the measurement cannot be trusted.

Maybe I got lost, but when James said "advisory" I understood this as
the TCG type that does not get included in a PCR extend.

Any log that does get extended is a tamper-proof measured log entry
and those have to verified untampered before they can be processed by
anything.

The IMA violations are extended to the PCR so they are normal measured
log entries. AFAICT.

Jason