[LTP] [PATCH v2] ima_tpm.sh: properly detect failure to verify the IMA measurement list
Petr Vorel
pvorel@suse.cz
Thu Sep 10 21:41:38 CEST 2026
Hi Mimi,
> test2 attempts to compare the aggregate PCR-10 value with the current
> TPM PCR value based on the current measurement list, but does not take
> into account that the measurement list might have grown.
> evmctl returns success/failure when verifying the IMA measurement list
> and displays the measurement list line number that matched.
> Update test2 to check the return code, before failing the test.
> Include the matched line number and total number of measurement
> list records.
I was not able to reproduce the failure on VM BIOS (legacy) running on UEFI QEMU
host which I reported previously, therefore I merged it.
Thank you!
Kind regards,
Petr
More information about the ltp
mailing list