Project

General

Profile

Actions

action #101148

closed

[sle][security][sle15sp4][feature][manual]: Apply ima_measure_critical_data patches [aarch64 only]

Added by rfan1 over 2 years ago. Updated over 2 years ago.

Status:
Resolved
Priority:
Normal
Assignee:
Category:
New test
Target version:
-
Start date:
2021-10-19
Due date:
% Done:

100%

Estimated time:
12.00 h
Difficulty:

Description

https://jira.suse.com/browse/SLE-18388

Only need test on aarch64. we may have the kernel configuration already:
#cat /boot/config-5.14.5-1-default |grep CONFIG_IMA_QUEUE_EARLY_BOOT_KEYS=y
CONFIG_IMA_QUEUE_EARLY_BOOT_KEYS=y

Will try to double check this parameter as well on all other platform via openqa automation run.

no other function test requirements for now


Related issues 1 (0 open1 closed)

Copied to openQA Tests - action #102707: [sle][security][sle15sp4][feature][automation]: Apply ima_measure_critical_data patches [aarch64 only]Resolvedrfan12021-10-19

Actions
Actions #1

Updated by rfan1 over 2 years ago

  • Status changed from New to In Progress
  • Estimated time changed from 3.00 h to 10.00 h

Plan to do more tests upon checking kernel config

Actions #2

Updated by rfan1 over 2 years ago

  • Subject changed from [sle][security][sle15sp4]: Apply ima_measure_critical_data patches [aarch64 only] to [sle][security][sle15sp4][feature]: Apply ima_measure_critical_data patches [aarch64 only]

Added kernel parameter "ima_policy=critical_data" to see if any boot failure and measurement logs

Actions #3

Updated by rfan1 over 2 years ago

  • Subject changed from [sle][security][sle15sp4][feature]: Apply ima_measure_critical_data patches [aarch64 only] to [sle][security][sle15sp4][feature][manual]: Apply ima_measure_critical_data patches [aarch64 only]
Actions #4

Updated by rfan1 over 2 years ago

  • Copied to action #102707: [sle][security][sle15sp4][feature][automation]: Apply ima_measure_critical_data patches [aarch64 only] added
Actions #5

Updated by rfan1 over 2 years ago

  • Status changed from In Progress to Resolved
  • % Done changed from 0 to 100
  • Estimated time changed from 10.00 h to 12.00 h

Manual test done

Actions

Also available in: Atom PDF