[LTP] [PATCH v2] ima_tpm.sh: properly detect failure to verify the IMA measurement list

Petr Vorel pvorel@suse.cz
Thu Sep 10 21:41:38 CEST 2026


Hi Mimi,

> test2 attempts to compare the aggregate PCR-10 value with the current
> TPM PCR value based on the current measurement list, but does not take
> into account that the measurement list might have grown.

> evmctl returns success/failure when verifying the IMA measurement list
> and displays the measurement list line number that matched.

> Update test2 to check the return code, before failing the test.
> Include the matched line number and total number of measurement
> list records.

I was not able to reproduce the failure on VM BIOS (legacy) running on UEFI QEMU
host which I reported previously, therefore I merged it.

Thank you!

Kind regards,
Petr


More information about the ltp mailing list