admin-guide/device-mapper/dm-ima.rst

26 IMA kernel subsystem provides the necessary functionality for
34 Setting the IMA Policy:
36 For IMA to measure the data on a given system, the IMA policy on the
45 The measurements will be reflected in the IMA logs, which are located at:
52 Then IMA ASCII measurement log has the following format:
61  TEMPLATE_DATA_DIGEST := Template data digest of the IMA record.
76 | The DM target data measured by IMA subsystem can alternatively
84 | To support recording duplicate IMA events in the IMA log, the Kernel needs to be configured with
89 Following device state changes will trigger IMA measurements:
103 The IMA measurement log has the following format for 'dm_table_load':
136                  in the buffer (say from target 0 to x) is measured in a given IMA event.
137 …               The remaining data from targets x+1 to N-1 is measured in the subsequent IMA events,
144                 The targets that are supported for IMA measurements are documented below in the
156  Then IMA ASCII measurement log will have the following entry:
173 The IMA measurement log has the following format for 'dm_device_resume':
183                       Rerpresents the hash of the IMA data being measured for the
188                Note: If the table_load data spans across multiple IMA 'dm_table_load'
197  then IMA ASCII measurement log will have an entry with:
211 The IMA measurement log has the following format for 'dm_device_remove':
235  then IMA ASCII measurement log will have the following entry:
252 The IMA measurement log has the following format for 'dm_table_clear':
269  then IMA ASCII measurement log will have an entry with:
283 The IMA measurement log has the following format for 'dm_device_rename':
302  then IMA ASCII measurement log will have an entry with:
314  then IMA ASCII measurement log will have an entry with:
327 Following targets are supported to measure their data using IMA:
364  When a 'cache' target is loaded, then IMA ASCII measurement log will have an entry
407  When a 'crypt' target is loaded, then IMA ASCII measurement log will have an entry
450  When a 'integrity' target is loaded, then IMA ASCII measurement log will have an entry
477  When a 'linear' target is loaded, then IMA ASCII measurement log will have an entry
514  When a 'mirror' target is loaded, then IMA ASCII measurement log will have an entry
552  When a 'multipath' target is loaded, then IMA ASCII measurement log will have an entry
592  When a 'raid' target is loaded, then IMA ASCII measurement log will have an entry
627  When a 'snapshot' target is loaded, then IMA ASCII measurement log will have an entry
662  When a 'striped' target is loaded, then IMA ASCII measurement log will have an entry
704  When a 'verity' target is loaded, then IMA ASCII measurement log will have an entry