Re: [RFC] IMA: periodic runtime re-measurement of process .text/GOT

[Nicolai Kuntze]

Mimi,

Sorry for the long silence, and thank you for the review.

A short status note so the thread is not left hanging: I agree with
your direction. I am reworking this as an IMA critical-data measurement
(ima_measure_critical_data()) triggered by the securityfs write, and
will send a v3 on that basis once it has been tested against the
integrity tree. 

The question about extending unchanged digests in that mail needs a bit
of consideration on my end but I agree that my earlier justification
for it was not correct. 

One correction: the repository URL in my RFC and in my last message is
stale. The reference implementation now lives at
https://gitlab.rlp.net/trusted-computing/memory_attestation

Nicolai (drafted with AI assistance)