Skip to content

Commit

Permalink
keylime_policy-commands: Do not expect algorithm in policy
Browse files Browse the repository at this point in the history
Previously, the keylime_policy command would set the IMA template hash
algorithm to follow the algorithm set through --algo option.

This was an incorrect behavior and was recently fixed. Now the IMA
template hash algorithm is hardcoded as SHA-1, following kernel
implementation.

Signed-off-by: Anderson Toshiyuki Sasaki <[email protected]>
  • Loading branch information
ansasaki committed Sep 23, 2024
1 parent e22af4c commit 2ac9949
Showing 1 changed file with 0 additions and 1 deletion.
1 change: 0 additions & 1 deletion functional/keylime_policy-commands/test.sh
Original file line number Diff line number Diff line change
Expand Up @@ -143,7 +143,6 @@ rlJournalStart
rlRun "${algo}sum rootfs/test | awk '{print \$1}' > test.${algo}"
rlRun "${algo}sum rootfs/nested/nested | awk '{print \$1}' > nested.${algo}"
rlRun -s "keylime_policy create runtime --rootfs rootfs --algo ${algo}"
rlAssertGrep "${algo}" "$rlRun_LOG"
rlAssertGrep "$(cat test.${algo})" "$rlRun_LOG"
rlAssertGrep "$(cat nested.${algo})" "$rlRun_LOG"
done
Expand Down

0 comments on commit 2ac9949

Please sign in to comment.