http://kernsec.org/wiki/index.php?action=history&feed=atom&title=Linux_Security_Summit_2012%2FAbstracts%2FKasatkin 2026-05-07T12:04:35Z Revision history for this page on the wiki MediaWiki 1.36.1 http://kernsec.org/wiki/index.php?title=Linux_Security_Summit_2012/Abstracts/Kasatkin&diff=3303&oldid=prev 2012-06-27T04:00:42Z

<p>New page: == Title == Upcoming Extensions to the Linux kernel Integrity Subsystem (IMA/EVM) == Presenter == Dmitry Kasatkin == Abstract == The talk will introduce new extensions to the IMA/EVM ...</p> <p><b>New page</b></p><div>== Title ==<br /> <br /> Upcoming Extensions to the Linux kernel Integrity Subsystem (IMA/EVM)<br /> <br /> == Presenter ==<br /> <br /> Dmitry Kasatkin<br /> <br /> == Abstract ==<br /> <br /> The talk will introduce new extensions to the IMA/EVM kernel integrity<br /> subsystem.<br /> <br /> Extended verification module (EVM) has been integrated to Linux kernel since 3.2<br /> and digital signature verification extension since 3.3.<br /> <br /> Currently there is an effort going on to integrate IMA-appraisal extension,<br /> which allows local integrity appraisal based on hashes and digital signatures.<br /> IMA-appraisal extension protects the integrity of regular files,<br /> which is not enough to implement full integrity protection of the system.<br /> It is also necessary to protect integrity of directories and special files,<br /> such as symbolic links, device nodes, socket and pipes.<br /> <br /> Directory integrity verification has already been implemented and available in<br /> my tree at git.kernel.org. I will submit patches for RFC shortly.<br /> <br /> Patches for protecting integrity of special files are currently under<br /> development and expected to be ready before the summit.</div>

JamesMorris