On Tue, Sep 14, 2021 at 11:24:22AM -0400, Mimi Zohar wrote:

On Fri, 2021-09-10 at 15:47 -0300, Bruno Meneguele wrote:

quoted

The default hash algorithm for evmctl is today hardcoded in the libimaevm.c
file. To facilitate package maintainers across different distributions to
set their own default hash algorithm this, patch adds the
--with-default-hash=<algo> option to the configuration script.

The chosen algorithm will then be checked by its available in the kernel,
otherwise IMA won't be able to verify files hashed by the user. For that,
the kernel header hash_info.h used as the source of supported hashes. In
case the hash_info.h header is not present, the configuration script warns
about it, but uses whatever the user specified in the option.

Signed-off-by: Bruno Meneguele <redacted>

Thanks, Bruno.  This patch set is now queued in the next-testing
branch.

Mimi

Thanks Mimi.

-- 
bmeneg 
PGP Key: http://bmeneg.com/pubkey.txt