imrcpan/erofs-linux
1
0 Fork 0
mirror of git://git.kernel.org/pub/scm/linux/kernel/git/xiang/erofs.git synced 2026-10-28 12:53:14 +01:00
Code Issues Packages Projects Releases Wiki Activity

ima: allow users to specify the pcr index with IMA_MEASURE_PCR_IDX

Browse Source 
The IMA_MEASURE_PCR_IDX option is currently not visible in the kconfig
frontend, so it always uses its default, 10. This means that the
'range 8 14' is dead code, and users are unable to specify the pcr index
value.

In a previous discussion, Mimi explained that users should be able to use
this config option to specify the pcr index. [1]

Let's add a prompt for users to specify the pcr index, when EXPERT is
enabled.

This dead range was found by kconfirm, a static analysis tool for Kconfig.

Link: https://lore.kernel.org/all/[email protected]/T/#mc4efa2491b4937eb7c9e532c29ffba516a70e662 [1]
Signed-off-by: Julian Braha <[email protected]>
Signed-off-by: Mimi Zohar <[email protected]>
This commit is contained in:
Julian Braha authored and Mimi Zohar committed 2026-09-04 14:01:00 -04:00
1 parent 8861f6d5c0
commit 6903878d46
1 file changed
+5 -1
Download Patch File Download Diff File Expand all files Collapse all files
security/integrity/ima/Kconfig
+5 -1
View File
@@ -46,12 +46,16 @@ config IMA_KEXEC
config IMA_MEASURE_PCR_IDX
int
prompt "PCR Index for Aggregate" if EXPERT
range 8 14
default 10
help
IMA_MEASURE_PCR_IDX determines the TPM PCR register index
that IMA uses to maintain the integrity aggregate of the
measurement list. If unsure, use the default 10.
measurement list. Most attestation tooling expects PCR 10.
The default is almost always what you want. Only change this
if you know what you are doing.
config IMA_LSM_RULES
bool