€•ÊŒsphinx.addnodes”Œdocument”“”)�”}”(Œ rawsource”Œ”Œchildren”]”(Œ translations”Œ LanguagesNode”“”)�”}”(hhh]”(hŒ pending_xref”“”)�”}”(hhh]”Œdocutils.nodes”ŒText”“”ŒChinese (Simplified)”…”�”}”Œparent”hsbaŒ attributes”}”(Œids”]”Œclasses”]”Œnames”]”Œdupnames”]”Œbackrefs”]”Œ refdomain”Œstd”Œreftype”Œdoc”Œ reftarget”Œ4/translations/zh_CN/admin-guide/device-mapper/dm-ima”Œmodname”NŒ classname”NŒ refexplicit”ˆuŒtagname”hhh ubh)�”}”(hhh]”hŒChinese (Traditional)”…”�”}”hh2sbah}”(h]”h ]”h"]”h$]”h&]”Œ refdomain”h)Œreftype”h+Œ reftarget”Œ4/translations/zh_TW/admin-guide/device-mapper/dm-ima”Œmodname”NŒ classname”NŒ refexplicit”ˆuh1hhh ubh)�”}”(hhh]”hŒItalian”…”�”}”hhFsbah}”(h]”h ]”h"]”h$]”h&]”Œ refdomain”h)Œreftype”h+Œ reftarget”Œ4/translations/it_IT/admin-guide/device-mapper/dm-ima”Œmodname”NŒ classname”NŒ refexplicit”ˆuh1hhh ubh)�”}”(hhh]”hŒJapanese”…”�”}”hhZsbah}”(h]”h ]”h"]”h$]”h&]”Œ refdomain”h)Œreftype”h+Œ reftarget”Œ4/translations/ja_JP/admin-guide/device-mapper/dm-ima”Œmodname”NŒ classname”NŒ refexplicit”ˆuh1hhh ubh)�”}”(hhh]”hŒKorean”…”�”}”hhnsbah}”(h]”h ]”h"]”h$]”h&]”Œ refdomain”h)Œreftype”h+Œ reftarget”Œ4/translations/ko_KR/admin-guide/device-mapper/dm-ima”Œmodname”NŒ classname”NŒ refexplicit”ˆuh1hhh ubh)�”}”(hhh]”hŒPortuguese (Brazilian)”…”�”}”hh‚sbah}”(h]”h ]”h"]”h$]”h&]”Œ refdomain”h)Œreftype”h+Œ reftarget”Œ4/translations/pt_BR/admin-guide/device-mapper/dm-ima”Œmodname”NŒ classname”NŒ refexplicit”ˆuh1hhh ubh)�”}”(hhh]”hŒSpanish”…”�”}”hh–sbah}”(h]”h ]”h"]”h$]”h&]”Œ refdomain”h)Œreftype”h+Œ reftarget”Œ4/translations/sp_SP/admin-guide/device-mapper/dm-ima”Œmodname”NŒ classname”NŒ refexplicit”ˆuh1hhh ubeh}”(h]”h ]”h"]”h$]”h&]”Œcurrent_language”ŒEnglish”uh1h hhŒ _document”hŒsource”NŒline”NubhŒsection”“”)�”}”(hhh]”(hŒtitle”“”)�”}”(hŒdm-ima”h]”hŒdm-ima”…”�”}”(hh¼h²hh³Nh´Nubah}”(h]”h ]”h"]”h$]”h&]”uh1hºhh·h²hh³ŒN/var/lib/git/docbuild/linux/Documentation/admin-guide/device-mapper/dm-ima.rst”h´KubhŒ paragraph”“”)�”}”(hX±For a given system, various external services/infrastructure tools (including the attestation service) interact with it - both during the setup and during rest of the system run-time. They share sensitive data and/or execute critical workload on that system. The external services may want to verify the current run-time state of the relevant kernel subsystems before fully trusting the system with business-critical data/workload.”h]”hX±For a given system, various external services/infrastructure tools (including the attestation service) interact with it - both during the setup and during rest of the system run-time. They share sensitive data and/or execute critical workload on that system. The external services may want to verify the current run-time state of the relevant kernel subsystems before fully trusting the system with business-critical data/workload.”…”�”}”(hhÍh²hh³Nh´Nubah}”(h]”h ]”h"]”h$]”h&]”uh1hËh³hÊh´Khh·h²hubhÌ)�”}”(hX.Device mapper plays a critical role on a given system by providing various important functionalities to the block devices using various target types like crypt, verity, integrity etc. Each of these target types’ functionalities can be configured with various attributes. The attributes chosen to configure these target types can significantly impact the security profile of the block device, and in-turn, of the system itself. For instance, the type of encryption algorithm and the key size determines the strength of encryption for a given block device.”h]”hX.Device mapper plays a critical role on a given system by providing various important functionalities to the block devices using various target types like crypt, verity, integrity etc. Each of these target types’ functionalities can be configured with various attributes. The attributes chosen to configure these target types can significantly impact the security profile of the block device, and in-turn, of the system itself. For instance, the type of encryption algorithm and the key size determines the strength of encryption for a given block device.”…”�”}”(hhÛh²hh³Nh´Nubah}”(h]”h ]”h"]”h$]”h&]”uh1hËh³hÊh´K hh·h²hubhÌ)�”}”(hŒÒTherefore, verifying the current state of various block devices as well as their various target attributes is crucial for external services before fully trusting the system with business-critical data/workload.”h]”hŒÒTherefore, verifying the current state of various block devices as well as their various target attributes is crucial for external services before fully trusting the system with business-critical data/workload.”…”�”}”(hhéh²hh³Nh´Nubah}”(h]”h ]”h"]”h$]”h&]”uh1hËh³hÊh´Khh·h²hubhÌ)�”}”(hŒ�IMA kernel subsystem provides the necessary functionality for device mapper to measure the state and configuration of various block devices -”h]”hŒ�IMA kernel subsystem provides the necessary functionality for device mapper to measure the state and configuration of various block devices -”…”�”}”(hh÷h²hh³Nh´Nubah}”(h]”h ]”h"]”h$]”h&]”uh1hËh³hÊh´Khh·h²hubhŒ bullet_list”“”)�”}”(hhh]”(hŒ list_item”“”)�”}”(hŒ0by device mapper itself, from within the kernel,”h]”hÌ)�”}”(hjh]”hŒ0by device mapper itself, from within the kernel,”…”�”}”(hjh²hh³Nh´Nubah}”(h]”h ]”h"]”h$]”h&]”uh1hËh³hÊh´Khj ubah}”(h]”h ]”h"]”h$]”h&]”uh1j hjh²hh³hÊh´Nubj )�”}”(hŒin a tamper resistant way,”h]”hÌ)�”}”(hj%h]”hŒin a tamper resistant way,”…”�”}”(hj'h²hh³Nh´Nubah}”(h]”h ]”h"]”h$]”h&]”uh1hËh³hÊh´Khj#ubah}”(h]”h ]”h"]”h$]”h&]”uh1j hjh²hh³hÊh´Nubj )�”}”(hŒ;and re-measured - triggered on state/configuration change. ”h]”hÌ)�”}”(hŒ:and re-measured - triggered on state/configuration change.”h]”hŒ:and re-measured - triggered on state/configuration change.”…”�”}”(hj>h²hh³Nh´Nubah}”(h]”h ]”h"]”h$]”h&]”uh1hËh³hÊh´K hj:ubah}”(h]”h ]”h"]”h$]”h&]”uh1j hjh²hh³hÊh´Nubeh}”(h]”h ]”h"]”h$]”h&]”Œbullet”Œ-”uh1jh³hÊh´Khh·h²hubh¶)�”}”(hhh]”(h»)�”}”(hŒSetting the IMA Policy:”h]”hŒSetting the IMA Policy:”…”�”}”(hj]h²hh³Nh´Nubah}”(h]”h ]”h"]”h$]”h&]”uh1hºhjZh²hh³hÊh´K#ubhÌ)�”}”(hŒÁFor IMA to measure the data on a given system, the IMA policy on the system needs to be updated to have following line, and the system needs to be restarted for the measurements to take effect.”h]”hŒÁFor IMA to measure the data on a given system, the IMA policy on the system needs to be updated to have following line, and the system needs to be restarted for the measurements to take effect.”…”�”}”(hjkh²hh³Nh´Nubah}”(h]”h ]”h"]”h$]”h&]”uh1hËh³hÊh´K$hjZh²hubhŒ literal_block”“”)�”}”(hŒV/etc/ima/ima-policy measure func=CRITICAL_DATA label=device-mapper template=ima-buf”h]”hŒV/etc/ima/ima-policy measure func=CRITICAL_DATA label=device-mapper template=ima-buf”…”�”}”hj{sbah}”(h]”h ]”h"]”h$]”h&]”Œ xml:space”Œpreserve”uh1jyh³hÊh´K*hjZh²hubhÌ)�”}”(hŒIThe measurements will be reflected in the IMA logs, which are located at:”h]”hŒIThe measurements will be reflected in the IMA logs, which are located at:”…”�”}”(hj‹h²hh³Nh´Nubah}”(h]”h ]”h"]”h$]”h&]”uh1hËh³hÊh´K-hjZh²hubjz)�”}”(hŒ|/sys/kernel/security/integrity/ima/ascii_runtime_measurements /sys/kernel/security/integrity/ima/binary_runtime_measurements”h]”hŒ|/sys/kernel/security/integrity/ima/ascii_runtime_measurements /sys/kernel/security/integrity/ima/binary_runtime_measurements”…”�”}”hj™sbah}”(h]”h ]”h"]”h$]”h&]”j‰jŠuh1jyh³hÊh´K1hjZh²hubhÌ)�”}”(hŒ8Then IMA ASCII measurement log has the following format:”h]”hŒ8Then IMA ASCII measurement log has the following format:”…”�”}”(hj§h²hh³Nh´Nubah}”(h]”h ]”h"]”h$]”h&]”uh1hËh³hÊh´K4hjZh²hubjz)�”}”(hXÌ PCR := Platform Configuration Register, in which the values are registered. This is applicable if TPM chip is in use. TEMPLATE_DATA_DIGEST := Template data digest of the IMA record. TEMPLATE_NAME := Template name that registered the integrity value (e.g. ima-buf). TEMPLATE_DATA := ":" It contains data for the specific event to be measured, in a given template data format. ALG := Algorithm to compute event digest EVENT_DIGEST := Digest of the event data EVENT_NAME := Description of the event (e.g. 'dm_table_load'). EVENT_DATA := The event data to be measured.”h]”hXÌ PCR := Platform Configuration Register, in which the values are registered. This is applicable if TPM chip is in use. TEMPLATE_DATA_DIGEST := Template data digest of the IMA record. TEMPLATE_NAME := Template name that registered the integrity value (e.g. ima-buf). TEMPLATE_DATA := ":" It contains data for the specific event to be measured, in a given template data format. ALG := Algorithm to compute event digest EVENT_DIGEST := Digest of the event data EVENT_NAME := Description of the event (e.g. 'dm_table_load'). EVENT_DATA := The event data to be measured.”…”�”}”hjµsbah}”(h]”h ]”h"]”h$]”h&]”j‰jŠuh1jyh³hÊh´K8hjZh²hubhŒ line_block”“”)�”}”(hhh]”hh´“”)�”}”(hhh]”h}”(h]”h ]”h"]”h$]”h&]”uh1h´hjÅh²hh³hÊh´KŒindent”Kubah}”(h]”h ]”h"]”h$]”h&]”uh1jÃhjZh²hh³hÊh´KIubjÄ)�”}”(hhh]”(jÈ)�”}”(hŒ *NOTE #1:*”h]”hŒemphasis”“”)�”}”(hjÞh]”hŒNOTE #1:”…”�”}”(hjâh²hh³Nh´Nubah}”(h]”h ]”h"]”h$]”h&]”uh1jàhjÜubah}”(h]”h ]”h"]”h$]”h&]”uh1h´jÒKhjÙh²hh³hÊh´KKubjÈ)�”}”(hŒ•The DM target data measured by IMA subsystem can alternatively be queried from userspace by setting DM_IMA_MEASUREMENT_FLAG with DM_TABLE_STATUS_CMD.”h]”hŒ•The DM target data measured by IMA subsystem can alternatively be queried from userspace by setting DM_IMA_MEASUREMENT_FLAG with DM_TABLE_STATUS_CMD.”…”�”}”(hjõh²hh³Nh´Nubah}”(h]”h ]”h"]”h$]”h&]”uh1h´jÒKhjÙh²hh³hÊh´KNubeh}”(h]”h ]”h"]”h$]”h&]”uh1jÃhjZh²hh³hÊh´KKubjÄ)�”}”(hhh]”jÈ)�”}”(hhh]”h}”(h]”h ]”h"]”h$]”h&]”uh1h´hj h²hh³hÊh´KjÒKubah}”(h]”h ]”h"]”h$]”h&]”uh1jÃhjZh²hh³hÊh´KPubjÄ)�”}”(hhh]”(jÈ)�”}”(hŒ *NOTE #2:*”h]”já)�”}”(hj h]”hŒNOTE #2:”…”�”}”(hj"h²hh³Nh´Nubah}”(h]”h ]”h"]”h$]”h&]”uh1jàhjubah}”(h]”h ]”h"]”h$]”h&]”uh1h´jÒKhjh²hh³hÊh´KRubjÈ)�”}”(hŒ[The Kernel configuration CONFIG_IMA_DISABLE_HTABLE allows measurement of duplicate records.”h]”hŒ[The Kernel configuration CONFIG_IMA_DISABLE_HTABLE allows measurement of duplicate records.”…”�”}”(hj5h²hh³Nh´Nubah}”(h]”h ]”h"]”h$]”h&]”uh1h´jÒKhjh²hh³hÊh´KSubjÈ)�”}”(hŒ}To support recording duplicate IMA events in the IMA log, the Kernel needs to be configured with CONFIG_IMA_DISABLE_HTABLE=y.”h]”hŒ}To support recording duplicate IMA events in the IMA log, the Kernel needs to be configured with CONFIG_IMA_DISABLE_HTABLE=y.”…”�”}”(hjCh²hh³Nh´Nubah}”(h]”h ]”h"]”h$]”h&]”uh1h´jÒKhjh²hh³hÊh´KUubeh}”(h]”h ]”h"]”h$]”h&]”uh1jÃhjZh²hh³hÊh´KRubeh}”(h]”Œsetting-the-ima-policy”ah ]”h"]”Œsetting the ima policy:”ah$]”h&]”uh1hµhh·h²hh³hÊh´K#ubh¶)�”}”(hhh]”(h»)�”}”(hŒSupported Device States:”h]”hŒSupported Device States:”…”�”}”(hjbh²hh³Nh´Nubah}”(h]”h ]”h"]”h$]”h&]”uh1hºhj_h²hh³hÊh´KXubhÌ)�”}”(hŒ=Following device state changes will trigger IMA measurements:”h]”hŒ=Following device state changes will trigger IMA measurements:”…”�”}”(hjph²hh³Nh´Nubah}”(h]”h ]”h"]”h$]”h&]”uh1hËh³hÊh´KYhj_h²hubhŒ block_quote”“”)�”}”(hŒP1. Table load #. Device resume #. Device remove #. Table clear #. Device rename ”h]”hŒenumerated_list”“”)�”}”(hhh]”(j )�”}”(hŒ Table load”h]”hÌ)�”}”(hj‹h]”hŒ Table load”…”�”}”(hj�h²hh³Nh´Nubah}”(h]”h ]”h"]”h$]”h&]”uh1hËh³hÊh´K[hj‰ubah}”(h]”h ]”h"]”h$]”h&]”uh1j hj†ubj )�”}”(hŒ Device resume”h]”hÌ)�”}”(hj¢h]”hŒ Device resume”…”�”}”(hj¤h²hh³Nh´Nubah}”(h]”h ]”h"]”h$]”h&]”uh1hËh³hÊh´K\hj ubah}”(h]”h ]”h"]”h$]”h&]”uh1j hj†ubj )�”}”(hŒ Device remove”h]”hÌ)�”}”(hj¹h]”hŒ Device remove”…”�”}”(hj»h²hh³Nh´Nubah}”(h]”h ]”h"]”h$]”h&]”uh1hËh³hÊh´K]hj·ubah}”(h]”h ]”h"]”h$]”h&]”uh1j hj†ubj )�”}”(hŒ Table clear”h]”hÌ)�”}”(hjÐh]”hŒ Table clear”…”�”}”(hjÒh²hh³Nh´Nubah}”(h]”h ]”h"]”h$]”h&]”uh1hËh³hÊh´K^hjÎubah}”(h]”h ]”h"]”h$]”h&]”uh1j hj†ubj )�”}”(hŒDevice rename ”h]”hÌ)�”}”(hŒ Device rename”h]”hŒ Device rename”…”�”}”(hjéh²hh³Nh´Nubah}”(h]”h ]”h"]”h$]”h&]”uh1hËh³hÊh´K_hjåubah}”(h]”h ]”h"]”h$]”h&]”uh1j hj†ubeh}”(h]”h ]”h"]”h$]”h&]”Œenumtype”Œarabic”Œprefix”hŒsuffix”Œ.”uh1j„hj€ubah}”(h]”h ]”h"]”h$]”h&]”uh1j~h³hÊh´K[hj_h²hubh¶)�”}”(hhh]”(h»)�”}”(hŒ1. Table load:”h]”hŒ1. Table load:”…”�”}”(hjh²hh³Nh´Nubah}”(h]”h ]”h"]”h$]”h&]”uh1hºhjh²hh³hÊh´KbubhÌ)�”}”(hŒœWhen a new table is loaded in a device's inactive table slot, the device information and target specific details from the targets in the table are measured.”h]”hŒžWhen a new table is loaded in a device’s inactive table slot, the device information and target specific details from the targets in the table are measured.”…”�”}”(hjh²hh³Nh´Nubah}”(h]”h ]”h"]”h$]”h&]”uh1hËh³hÊh´Kchjh²hubhÌ)�”}”(hŒEThe IMA measurement log has the following format for 'dm_table_load':”h]”hŒIThe IMA measurement log has the following format for ‘dm_table_load’:”…”�”}”(hj-h²hh³Nh´Nubah}”(h]”h ]”h"]”h$]”h&]”uh1hËh³hÊh´Kghjh²hubjz)�”}”(hXí EVENT_NAME := "dm_table_load" EVENT_DATA := ";" ";" dm_version_str := "dm_version=" "." "." Same as Device Mapper driver version. device_metadata := "," "," "," "," "," ";" device_name := "name=" device_uuid := "uuid=" device_major := "major=" device_minor := "minor=" minor_count := "minor_count=" num_device_targets := "num_targets=" dm-device-name := Name of the device. If it contains special characters like '\', ',', ';', they are prefixed with '\'. dm-device-uuid := UUID of the device. If it contains special characters like '\', ',', ';', they are prefixed with '\'. table_load_data := Represents the data (as name=value pairs) from various targets in the table, which is being loaded into the DM device's inactive table slot. target_data := | target_data_row := "," "," "," "," "," ";" target_index := "target_index=" Represents nth target in the table (from 0 to N-1 targets specified in ) If all the data for N targets doesn't fit in the given buffer - then the data that fits in the buffer (say from target 0 to x) is measured in a given IMA event. The remaining data from targets x+1 to N-1 is measured in the subsequent IMA events, with the same format as that of 'dm_table_load' i.e. ";" ";" . target_begin := "target_begin=" target_len := "target_len=" target_name := Name of the target. 'linear', 'crypt', 'integrity' etc. The targets that are supported for IMA measurements are documented below in the 'Supported targets' section. target_version := "target_version=" "." "." target_attributes := Data containing comma separated list of name=value pairs of target specific attributes. For instance, if a linear device is created with the following table entries, # dmsetup create linear1 0 2 linear /dev/loop0 512 2 2 linear /dev/loop0 512 4 2 linear /dev/loop0 512 6 2 linear /dev/loop0 512 Then IMA ASCII measurement log will have the following entry: (converted from ASCII to text for readability) 10 a8c5ff755561c7a28146389d1514c318592af49a ima-buf sha256:4d73481ecce5eadba8ab084640d85bb9ca899af4d0a122989252a76efadc5b72 dm_table_load dm_version=4.45.0; name=linear1,uuid=,major=253,minor=0,minor_count=1,num_targets=4; target_index=0,target_begin=0,target_len=2,target_name=linear,target_version=1.4.0,device_name=7:0,start=512; target_index=1,target_begin=2,target_len=2,target_name=linear,target_version=1.4.0,device_name=7:0,start=512; target_index=2,target_begin=4,target_len=2,target_name=linear,target_version=1.4.0,device_name=7:0,start=512; target_index=3,target_begin=6,target_len=2,target_name=linear,target_version=1.4.0,device_name=7:0,start=512;”h]”hXí EVENT_NAME := "dm_table_load" EVENT_DATA := ";" ";" dm_version_str := "dm_version=" "." "." Same as Device Mapper driver version. device_metadata := "," "," "," "," "," ";" device_name := "name=" device_uuid := "uuid=" device_major := "major=" device_minor := "minor=" minor_count := "minor_count=" num_device_targets := "num_targets=" dm-device-name := Name of the device. If it contains special characters like '\', ',', ';', they are prefixed with '\'. dm-device-uuid := UUID of the device. If it contains special characters like '\', ',', ';', they are prefixed with '\'. table_load_data := Represents the data (as name=value pairs) from various targets in the table, which is being loaded into the DM device's inactive table slot. target_data := | target_data_row := "," "," "," "," "," ";" target_index := "target_index=" Represents nth target in the table (from 0 to N-1 targets specified in ) If all the data for N targets doesn't fit in the given buffer - then the data that fits in the buffer (say from target 0 to x) is measured in a given IMA event. The remaining data from targets x+1 to N-1 is measured in the subsequent IMA events, with the same format as that of 'dm_table_load' i.e. ";" ";" . target_begin := "target_begin=" target_len := "target_len=" target_name := Name of the target. 'linear', 'crypt', 'integrity' etc. The targets that are supported for IMA measurements are documented below in the 'Supported targets' section. target_version := "target_version=" "." "." target_attributes := Data containing comma separated list of name=value pairs of target specific attributes. For instance, if a linear device is created with the following table entries, # dmsetup create linear1 0 2 linear /dev/loop0 512 2 2 linear /dev/loop0 512 4 2 linear /dev/loop0 512 6 2 linear /dev/loop0 512 Then IMA ASCII measurement log will have the following entry: (converted from ASCII to text for readability) 10 a8c5ff755561c7a28146389d1514c318592af49a ima-buf sha256:4d73481ecce5eadba8ab084640d85bb9ca899af4d0a122989252a76efadc5b72 dm_table_load dm_version=4.45.0; name=linear1,uuid=,major=253,minor=0,minor_count=1,num_targets=4; target_index=0,target_begin=0,target_len=2,target_name=linear,target_version=1.4.0,device_name=7:0,start=512; target_index=1,target_begin=2,target_len=2,target_name=linear,target_version=1.4.0,device_name=7:0,start=512; target_index=2,target_begin=4,target_len=2,target_name=linear,target_version=1.4.0,device_name=7:0,start=512; target_index=3,target_begin=6,target_len=2,target_name=linear,target_version=1.4.0,device_name=7:0,start=512;”…”�”}”hj;sbah}”(h]”h ]”h"]”h$]”h&]”j‰jŠuh1jyh³hÊh´Kkhjh²hubeh}”(h]”Œ table-load”ah ]”h"]”Œ1. table load:”ah$]”h&]”uh1hµhj_h²hh³hÊh´Kbubh¶)�”}”(hhh]”(h»)�”}”(hŒ2. Device resume:”h]”hŒ2. Device resume:”…”�”}”(hjTh²hh³Nh´Nubah}”(h]”h ]”h"]”h$]”h&]”uh1hºhjQh²hh³hÊh´K©ubhÌ)�”}”(hŒ‡When a suspended device is resumed, the device information and the hash of the data from previous load of an active table are measured.”h]”hŒ‡When a suspended device is resumed, the device information and the hash of the data from previous load of an active table are measured.”…”�”}”(hjbh²hh³Nh´Nubah}”(h]”h ]”h"]”h$]”h&]”uh1hËh³hÊh´KªhjQh²hubhÌ)�”}”(hŒHThe IMA measurement log has the following format for 'dm_device_resume':”h]”hŒLThe IMA measurement log has the following format for ‘dm_device_resume’:”…”�”}”(hjph²hh³Nh´Nubah}”(h]”h ]”h"]”h$]”h&]”uh1hËh³hÊh´K­hjQh²hubjz)�”}”(hX8EVENT_NAME := "dm_device_resume" EVENT_DATA := ";" ";" ";" ";" dm_version_str := As described in the 'Table load' section above. device_metadata := As described in the 'Table load' section above. active_table_hash := "active_table_hash=" ":" Rerpresents the hash of the IMA data being measured for the active table for the device. table_hash_alg := Algorithm used to compute the hash. table_hash := Hash of the ( ";" ";" ";") as described in the 'dm_table_load' above. Note: If the table_load data spans across multiple IMA 'dm_table_load' events for a given device, the hash is computed combining all the event data i.e. ( ";" ";" ";") across all those events. current_device_capacity := "current_device_capacity=" For instance, if a linear device is resumed with the following command, #dmsetup resume linear1 then IMA ASCII measurement log will have an entry with: (converted from ASCII to text for readability) 10 56c00cc062ffc24ccd9ac2d67d194af3282b934e ima-buf sha256:e7d12c03b958b4e0e53e7363a06376be88d98a1ac191fdbd3baf5e4b77f329b6 dm_device_resume dm_version=4.45.0; name=linear1,uuid=,major=253,minor=0,minor_count=1,num_targets=4; active_table_hash=sha256:4d73481ecce5eadba8ab084640d85bb9ca899af4d0a122989252a76efadc5b72;current_device_capacity=8;”h]”hX8EVENT_NAME := "dm_device_resume" EVENT_DATA := ";" ";" ";" ";" dm_version_str := As described in the 'Table load' section above. device_metadata := As described in the 'Table load' section above. active_table_hash := "active_table_hash=" ":" Rerpresents the hash of the IMA data being measured for the active table for the device. table_hash_alg := Algorithm used to compute the hash. table_hash := Hash of the ( ";" ";" ";") as described in the 'dm_table_load' above. Note: If the table_load data spans across multiple IMA 'dm_table_load' events for a given device, the hash is computed combining all the event data i.e. ( ";" ";" ";") across all those events. current_device_capacity := "current_device_capacity=" For instance, if a linear device is resumed with the following command, #dmsetup resume linear1 then IMA ASCII measurement log will have an entry with: (converted from ASCII to text for readability) 10 56c00cc062ffc24ccd9ac2d67d194af3282b934e ima-buf sha256:e7d12c03b958b4e0e53e7363a06376be88d98a1ac191fdbd3baf5e4b77f329b6 dm_device_resume dm_version=4.45.0; name=linear1,uuid=,major=253,minor=0,minor_count=1,num_targets=4; active_table_hash=sha256:4d73481ecce5eadba8ab084640d85bb9ca899af4d0a122989252a76efadc5b72;current_device_capacity=8;”…”�”}”hj~sbah}”(h]”h ]”h"]”h$]”h&]”j‰jŠuh1jyh³hÊh´K±hjQh²hubeh}”(h]”Œ device-resume”ah ]”h"]”Œ2. device resume:”ah$]”h&]”uh1hµhj_h²hh³hÊh´K©ubh¶)�”}”(hhh]”(h»)�”}”(hŒ3. Device remove:”h]”hŒ3. Device remove:”…”�”}”(hj—h²hh³Nh´Nubah}”(h]”h ]”h"]”h$]”h&]”uh1hºhj”h²hh³hÊh´KÏubhÌ)�”}”(hŒ~When a device is removed, the device information and a sha256 hash of the data from an active and inactive table are measured.”h]”hŒ~When a device is removed, the device information and a sha256 hash of the data from an active and inactive table are measured.”…”�”}”(hj¥h²hh³Nh´Nubah}”(h]”h ]”h"]”h$]”h&]”uh1hËh³hÊh´KÐhj”h²hubhÌ)�”}”(hŒHThe IMA measurement log has the following format for 'dm_device_remove':”h]”hŒLThe IMA measurement log has the following format for ‘dm_device_remove’:”…”�”}”(hj³h²hh³Nh´Nubah}”(h]”h ]”h"]”h$]”h&]”uh1hËh³hÊh´KÓhj”h²hubjz)�”}”(hX{EVENT_NAME := "dm_device_remove" EVENT_DATA := ";" ";" ";" "," "," ";" ";" dm_version_str := As described in the 'Table load' section above. device_active_metadata := Device metadata that reflects the currently loaded active table. The format is same as 'device_metadata' described in the 'Table load' section above. device_inactive_metadata := Device metadata that reflects the inactive table. The format is same as 'device_metadata' described in the 'Table load' section above. active_table_hash := Hash of the currently loaded active table. The format is same as 'active_table_hash' described in the 'Device resume' section above. inactive_table_hash := Hash of the inactive table. The format is same as 'active_table_hash' described in the 'Device resume' section above. remove_all := "remove_all=" yes_no := "y" | "n" current_device_capacity := "current_device_capacity=" For instance, if a linear device is removed with the following command, #dmsetup remove l1 then IMA ASCII measurement log will have the following entry: (converted from ASCII to text for readability) 10 790e830a3a7a31590824ac0642b3b31c2d0e8b38 ima-buf sha256:ab9f3c959367a8f5d4403d6ce9c3627dadfa8f9f0e7ec7899299782388de3840 dm_device_remove dm_version=4.45.0; device_active_metadata=name=l1,uuid=,major=253,minor=2,minor_count=1,num_targets=2; device_inactive_metadata=name=l1,uuid=,major=253,minor=2,minor_count=1,num_targets=1; active_table_hash=sha256:4a7e62efaebfc86af755831998b7db6f59b60d23c9534fb16a4455907957953a, inactive_table_hash=sha256:9d79c175bc2302d55a183e8f50ad4bafd60f7692fd6249e5fd213e2464384b86,remove_all=n; current_device_capacity=2048;”h]”hX{EVENT_NAME := "dm_device_remove" EVENT_DATA := ";" ";" ";" "," "," ";" ";" dm_version_str := As described in the 'Table load' section above. device_active_metadata := Device metadata that reflects the currently loaded active table. The format is same as 'device_metadata' described in the 'Table load' section above. device_inactive_metadata := Device metadata that reflects the inactive table. The format is same as 'device_metadata' described in the 'Table load' section above. active_table_hash := Hash of the currently loaded active table. The format is same as 'active_table_hash' described in the 'Device resume' section above. inactive_table_hash := Hash of the inactive table. The format is same as 'active_table_hash' described in the 'Device resume' section above. remove_all := "remove_all=" yes_no := "y" | "n" current_device_capacity := "current_device_capacity=" For instance, if a linear device is removed with the following command, #dmsetup remove l1 then IMA ASCII measurement log will have the following entry: (converted from ASCII to text for readability) 10 790e830a3a7a31590824ac0642b3b31c2d0e8b38 ima-buf sha256:ab9f3c959367a8f5d4403d6ce9c3627dadfa8f9f0e7ec7899299782388de3840 dm_device_remove dm_version=4.45.0; device_active_metadata=name=l1,uuid=,major=253,minor=2,minor_count=1,num_targets=2; device_inactive_metadata=name=l1,uuid=,major=253,minor=2,minor_count=1,num_targets=1; active_table_hash=sha256:4a7e62efaebfc86af755831998b7db6f59b60d23c9534fb16a4455907957953a, inactive_table_hash=sha256:9d79c175bc2302d55a183e8f50ad4bafd60f7692fd6249e5fd213e2464384b86,remove_all=n; current_device_capacity=2048;”…”�”}”hjÁsbah}”(h]”h ]”h"]”h$]”h&]”j‰jŠuh1jyh³hÊh´K×hj”h²hubeh}”(h]”Œ device-remove”ah ]”h"]”Œ3. device remove:”ah$]”h&]”uh1hµhj_h²hh³hÊh´KÏubh¶)�”}”(hhh]”(h»)�”}”(hŒ4. Table clear:”h]”hŒ4. Table clear:”…”�”}”(hjÚh²hh³Nh´Nubah}”(h]”h ]”h"]”h$]”h&]”uh1hºhj×h²hh³hÊh´KøubhÌ)�”}”(hŒŒWhen an inactive table is cleared from the device, the device information and a sha256 hash of the data from an inactive table are measured.”h]”hŒŒWhen an inactive table is cleared from the device, the device information and a sha256 hash of the data from an inactive table are measured.”…”�”}”(hjèh²hh³Nh´Nubah}”(h]”h ]”h"]”h$]”h&]”uh1hËh³hÊh´Kùhj×h²hubhÌ)�”}”(hŒFThe IMA measurement log has the following format for 'dm_table_clear':”h]”hŒJThe IMA measurement log has the following format for ‘dm_table_clear’:”…”�”}”(hjöh²hh³Nh´Nubah}”(h]”h ]”h"]”h$]”h&]”uh1hËh³hÊh´Kühj×h²hubjz)�”}”(hXÉEVENT_NAME := "dm_table_clear" EVENT_DATA := ";" ";" ";" ";" dm_version_str := As described in the 'Table load' section above. device_inactive_metadata := Device metadata that was captured during the load time inactive table being cleared. The format is same as 'device_metadata' described in the 'Table load' section above. inactive_table_hash := Hash of the inactive table being cleared from the device. The format is same as 'active_table_hash' described in the 'Device resume' section above. current_device_capacity := "current_device_capacity=" For instance, if a linear device's inactive table is cleared, #dmsetup clear l1 then IMA ASCII measurement log will have an entry with: (converted from ASCII to text for readability) 10 77d347408f557f68f0041acb0072946bb2367fe5 ima-buf sha256:42f9ca22163fdfa548e6229dece2959bc5ce295c681644240035827ada0e1db5 dm_table_clear dm_version=4.45.0; name=l1,uuid=,major=253,minor=2,minor_count=1,num_targets=1; inactive_table_hash=sha256:75c0dc347063bf474d28a9907037eba060bfe39d8847fc0646d75e149045d545;current_device_capacity=1024;”h]”hXÉEVENT_NAME := "dm_table_clear" EVENT_DATA := ";" ";" ";" ";" dm_version_str := As described in the 'Table load' section above. device_inactive_metadata := Device metadata that was captured during the load time inactive table being cleared. The format is same as 'device_metadata' described in the 'Table load' section above. inactive_table_hash := Hash of the inactive table being cleared from the device. The format is same as 'active_table_hash' described in the 'Device resume' section above. current_device_capacity := "current_device_capacity=" For instance, if a linear device's inactive table is cleared, #dmsetup clear l1 then IMA ASCII measurement log will have an entry with: (converted from ASCII to text for readability) 10 77d347408f557f68f0041acb0072946bb2367fe5 ima-buf sha256:42f9ca22163fdfa548e6229dece2959bc5ce295c681644240035827ada0e1db5 dm_table_clear dm_version=4.45.0; name=l1,uuid=,major=253,minor=2,minor_count=1,num_targets=1; inactive_table_hash=sha256:75c0dc347063bf474d28a9907037eba060bfe39d8847fc0646d75e149045d545;current_device_capacity=1024;”…”�”}”hjsbah}”(h]”h ]”h"]”h$]”h&]”j‰jŠuh1jyh³hÊh´Mhj×h²hubeh}”(h]”Œ table-clear”ah ]”h"]”Œ4. table clear:”ah$]”h&]”uh1hµhj_h²hh³hÊh´Køubh¶)�”}”(hhh]”(h»)�”}”(hŒ5. Device rename:”h]”hŒ5. Device rename:”…”�”}”(hjh²hh³Nh´Nubah}”(h]”h ]”h"]”h$]”h&]”uh1hºhjh²hh³hÊh´MubhÌ)�”}”(hŒhWhen an device's NAME or UUID is changed, the device information and the new NAME and UUID are measured.”h]”hŒjWhen an device’s NAME or UUID is changed, the device information and the new NAME and UUID are measured.”…”�”}”(hj+h²hh³Nh´Nubah}”(h]”h ]”h"]”h$]”h&]”uh1hËh³hÊh´Mhjh²hubhÌ)�”}”(hŒHThe IMA measurement log has the following format for 'dm_device_rename':”h]”hŒLThe IMA measurement log has the following format for ‘dm_device_rename’:”…”�”}”(hj9h²hh³Nh´Nubah}”(h]”h ]”h"]”h$]”h&]”uh1hËh³hÊh´Mhjh²hubjz)�”}”(hXEVENT_NAME := "dm_device_rename" EVENT_DATA := ";" ";" "," ";" ";" dm_version_str := As described in the 'Table load' section above. device_active_metadata := Device metadata that reflects the currently loaded active table. The format is same as 'device_metadata' described in the 'Table load' section above. new_device_name := "new_name=" dm-device-name := Same as described in 'Table load' section above new_device_uuid := "new_uuid=" dm-device-uuid := Same as described in 'Table load' section above current_device_capacity := "current_device_capacity=" E.g 1: if a linear device's name is changed with the following command, #dmsetup rename linear1 --setuuid 1234-5678 then IMA ASCII measurement log will have an entry with: (converted from ASCII to text for readability) 10 8b0423209b4c66ac1523f4c9848c9b51ee332f48 ima-buf sha256:6847b7258134189531db593e9230b257c84f04038b5a18fd2e1473860e0569ac dm_device_rename dm_version=4.45.0; name=linear1,uuid=,major=253,minor=2,minor_count=1,num_targets=1;new_name=linear1,new_uuid=1234-5678; current_device_capacity=1024; E.g 2: if a linear device's name is changed with the following command, # dmsetup rename linear1 linear=2 then IMA ASCII measurement log will have an entry with: (converted from ASCII to text for readability) 10 bef70476b99c2bdf7136fae033aa8627da1bf76f ima-buf sha256:8c6f9f53b9ef9dc8f92a2f2cca8910e622543d0f0d37d484870cb16b95111402 dm_device_rename dm_version=4.45.0; name=linear1,uuid=1234-5678,major=253,minor=2,minor_count=1,num_targets=1; new_name=linear\=2,new_uuid=1234-5678; current_device_capacity=1024;”h]”hXEVENT_NAME := "dm_device_rename" EVENT_DATA := ";" ";" "," ";" ";" dm_version_str := As described in the 'Table load' section above. device_active_metadata := Device metadata that reflects the currently loaded active table. The format is same as 'device_metadata' described in the 'Table load' section above. new_device_name := "new_name=" dm-device-name := Same as described in 'Table load' section above new_device_uuid := "new_uuid=" dm-device-uuid := Same as described in 'Table load' section above current_device_capacity := "current_device_capacity=" E.g 1: if a linear device's name is changed with the following command, #dmsetup rename linear1 --setuuid 1234-5678 then IMA ASCII measurement log will have an entry with: (converted from ASCII to text for readability) 10 8b0423209b4c66ac1523f4c9848c9b51ee332f48 ima-buf sha256:6847b7258134189531db593e9230b257c84f04038b5a18fd2e1473860e0569ac dm_device_rename dm_version=4.45.0; name=linear1,uuid=,major=253,minor=2,minor_count=1,num_targets=1;new_name=linear1,new_uuid=1234-5678; current_device_capacity=1024; E.g 2: if a linear device's name is changed with the following command, # dmsetup rename linear1 linear=2 then IMA ASCII measurement log will have an entry with: (converted from ASCII to text for readability) 10 bef70476b99c2bdf7136fae033aa8627da1bf76f ima-buf sha256:8c6f9f53b9ef9dc8f92a2f2cca8910e622543d0f0d37d484870cb16b95111402 dm_device_rename dm_version=4.45.0; name=linear1,uuid=1234-5678,major=253,minor=2,minor_count=1,num_targets=1; new_name=linear\=2,new_uuid=1234-5678; current_device_capacity=1024;”…”�”}”hjGsbah}”(h]”h ]”h"]”h$]”h&]”j‰jŠuh1jyh³hÊh´Mhjh²hubeh}”(h]”Œ device-rename”ah ]”h"]”Œ5. device rename:”ah$]”h&]”uh1hµhj_h²hh³hÊh´Mubeh}”(h]”Œsupported-device-states”ah ]”h"]”Œsupported device states:”ah$]”h&]”uh1hµhh·h²hh³hÊh´KXubh¶)�”}”(hhh]”(h»)�”}”(hŒSupported targets:”h]”hŒSupported targets:”…”�”}”(hjhh²hh³Nh´Nubah}”(h]”h ]”h"]”h$]”h&]”uh1hºhjeh²hh³hÊh´MEubhÌ)�”}”(hŒ@Following targets are supported to measure their data using IMA:”h]”hŒ@Following targets are supported to measure their data using IMA:”…”�”}”(hjvh²hh³Nh´Nubah}”(h]”h ]”h"]”h$]”h&]”uh1hËh³hÊh´MGhjeh²hubj)�”}”(hŒi1. cache #. crypt #. integrity #. linear #. mirror #. multipath #. raid #. snapshot #. striped #. verity ”h]”j…)�”}”(hhh]”(j )�”}”(hŒcache”h]”hÌ)�”}”(hj�h]”hŒcache”…”�”}”(hj�h²hh³Nh´Nubah}”(h]”h ]”h"]”h$]”h&]”uh1hËh³hÊh´MIhj‹ubah}”(h]”h ]”h"]”h$]”h&]”uh1j hjˆubj )�”}”(hŒcrypt”h]”hÌ)�”}”(hj¤h]”hŒcrypt”…”�”}”(hj¦h²hh³Nh´Nubah}”(h]”h ]”h"]”h$]”h&]”uh1hËh³hÊh´MJhj¢ubah}”(h]”h ]”h"]”h$]”h&]”uh1j hjˆubj )�”}”(hŒ integrity”h]”hÌ)�”}”(hj»h]”hŒ integrity”…”�”}”(hj½h²hh³Nh´Nubah}”(h]”h ]”h"]”h$]”h&]”uh1hËh³hÊh´MKhj¹ubah}”(h]”h ]”h"]”h$]”h&]”uh1j hjˆubj )�”}”(hŒlinear”h]”hÌ)�”}”(hjÒh]”hŒlinear”…”�”}”(hjÔh²hh³Nh´Nubah}”(h]”h ]”h"]”h$]”h&]”uh1hËh³hÊh´MLhjÐubah}”(h]”h ]”h"]”h$]”h&]”uh1j hjˆubj )�”}”(hŒmirror”h]”hÌ)�”}”(hjéh]”hŒmirror”…”�”}”(hjëh²hh³Nh´Nubah}”(h]”h ]”h"]”h$]”h&]”uh1hËh³hÊh´MMhjçubah}”(h]”h ]”h"]”h$]”h&]”uh1j hjˆubj )�”}”(hŒ multipath”h]”hÌ)�”}”(hjh]”hŒ multipath”…”�”}”(hjh²hh³Nh´Nubah}”(h]”h ]”h"]”h$]”h&]”uh1hËh³hÊh´MNhjþubah}”(h]”h ]”h"]”h$]”h&]”uh1j hjˆubj )�”}”(hŒraid”h]”hÌ)�”}”(hjh]”hŒraid”…”�”}”(hjh²hh³Nh´Nubah}”(h]”h ]”h"]”h$]”h&]”uh1hËh³hÊh´MOhjubah}”(h]”h ]”h"]”h$]”h&]”uh1j hjˆubj )�”}”(hŒsnapshot”h]”hÌ)�”}”(hj.h]”hŒsnapshot”…”�”}”(hj0h²hh³Nh´Nubah}”(h]”h ]”h"]”h$]”h&]”uh1hËh³hÊh´MPhj,ubah}”(h]”h ]”h"]”h$]”h&]”uh1j hjˆubj )�”}”(hŒstriped”h]”hÌ)�”}”(hjEh]”hŒstriped”…”�”}”(hjGh²hh³Nh´Nubah}”(h]”h ]”h"]”h$]”h&]”uh1hËh³hÊh´MQhjCubah}”(h]”h ]”h"]”h$]”h&]”uh1j hjˆubj )�”}”(hŒverity ”h]”hÌ)�”}”(hŒverity”h]”hŒverity”…”�”}”(hj^h²hh³Nh´Nubah}”(h]”h ]”h"]”h$]”h&]”uh1hËh³hÊh´MRhjZubah}”(h]”h ]”h"]”h$]”h&]”uh1j hjˆubeh}”(h]”h ]”h"]”h$]”h&]”jjjhjjuh1j„hj„ubah}”(h]”h ]”h"]”h$]”h&]”uh1j~h³hÊh´MIhjeh²hubh¶)�”}”(hhh]”(h»)�”}”(hŒ1. cache”h]”hŒ1. cache”…”�”}”(hj�h²hh³Nh´Nubah}”(h]”h ]”h"]”h$]”h&]”uh1hºhj~h²hh³hÊh´MUubhÌ)�”}”(hŒ‰The 'target_attributes' (described as part of EVENT_DATA in 'Table load' section above) has the following data format for 'cache' target.”h]”hŒ•The ‘target_attributes’ (described as part of EVENT_DATA in ‘Table load’ section above) has the following data format for ‘cache’ target.”…”�”}”(hj�h²hh³Nh´Nubah}”(h]”h ]”h"]”h$]”h&]”uh1hËh³hÊh´MVhj~h²hubjz)�”}”(hXktarget_attributes := "," "," "," "," "," "," "," "," "," ";" target_name := "target_name=cache" target_version := "target_version=" "." "." metadata_mode := "metadata_mode=" cache_metadata_mode := "fail" | "ro" | "rw" cache_device := "cache_device=" cache_origin_device := "cache_origin_device=" writethrough := "writethrough=" writeback := "writeback=" passthrough := "passthrough=" no_discard_passdown := "no_discard_passdown=" yes_no := "y" | "n" E.g. When a 'cache' target is loaded, then IMA ASCII measurement log will have an entry similar to the following, depicting what 'cache' attributes are measured in EVENT_DATA for 'dm_table_load' event. (converted from ASCII to text for readability) dm_version=4.45.0;name=cache1,uuid=cache_uuid,major=253,minor=2,minor_count=1,num_targets=1; target_index=0,target_begin=0,target_len=28672,target_name=cache,target_version=2.2.0,metadata_mode=rw, cache_metadata_device=253:4,cache_device=253:3,cache_origin_device=253:5,writethrough=y,writeback=n, passthrough=n,metadata2=y,no_discard_passdown=n;”h]”hXktarget_attributes := "," "," "," "," "," "," "," "," "," ";" target_name := "target_name=cache" target_version := "target_version=" "." "." metadata_mode := "metadata_mode=" cache_metadata_mode := "fail" | "ro" | "rw" cache_device := "cache_device=" cache_origin_device := "cache_origin_device=" writethrough := "writethrough=" writeback := "writeback=" passthrough := "passthrough=" no_discard_passdown := "no_discard_passdown=" yes_no := "y" | "n" E.g. When a 'cache' target is loaded, then IMA ASCII measurement log will have an entry similar to the following, depicting what 'cache' attributes are measured in EVENT_DATA for 'dm_table_load' event. (converted from ASCII to text for readability) dm_version=4.45.0;name=cache1,uuid=cache_uuid,major=253,minor=2,minor_count=1,num_targets=1; target_index=0,target_begin=0,target_len=28672,target_name=cache,target_version=2.2.0,metadata_mode=rw, cache_metadata_device=253:4,cache_device=253:3,cache_origin_device=253:5,writethrough=y,writeback=n, passthrough=n,metadata2=y,no_discard_passdown=n;”…”�”}”hj�sbah}”(h]”h ]”h"]”h$]”h&]”j‰jŠuh1jyh³hÊh´M[hj~h²hubeh}”(h]”Œcache”ah ]”h"]”Œ1. cache”ah$]”h&]”uh1hµhjeh²hh³hÊh´MUubh¶)�”}”(hhh]”(h»)�”}”(hŒ2. crypt”h]”hŒ2. crypt”…”�”}”(hj¶h²hh³Nh´Nubah}”(h]”h ]”h"]”h$]”h&]”uh1hºhj³h²hh³hÊh´MxubhÌ)�”}”(hŒ‰The 'target_attributes' (described as part of EVENT_DATA in 'Table load' section above) has the following data format for 'crypt' target.”h]”hŒ•The ‘target_attributes’ (described as part of EVENT_DATA in ‘Table load’ section above) has the following data format for ‘crypt’ target.”…”�”}”(hjÄh²hh³Nh´Nubah}”(h]”h ]”h"]”h$]”h&]”uh1hËh³hÊh´Myhj³h²hubjz)�”}”(hXtarget_attributes := "," "," "," "," "," "," "," "," "," [ ","] [ ","] [ ","] [ ","] "," "," "," ";" target_name := "target_name=crypt" target_version := "target_version=" "." "." allow_discards := "allow_discards=" same_cpu_crypt := "same_cpu_crypt=" submit_from_crypt_cpus := "submit_from_crypt_cpus=" no_read_workqueue := "no_read_workqueue=" no_write_workqueue := "no_write_workqueue=" iv_large_sectors := "iv_large_sectors=" integrity_tag_size := "integrity_tag_size=" cipher_auth := "cipher_auth=" sector_size := "sector_size=" cipher_string := "cipher_string=" key_size := "key_size=" key_parts := "key_parts=" key_extra_size := "key_extra_size=" key_mac_size := "key_mac_size=" yes_no := "y" | "n" E.g. When a 'crypt' target is loaded, then IMA ASCII measurement log will have an entry similar to the following, depicting what 'crypt' attributes are measured in EVENT_DATA for 'dm_table_load' event. (converted from ASCII to text for readability) dm_version=4.45.0; name=crypt1,uuid=crypt_uuid1,major=253,minor=0,minor_count=1,num_targets=1; target_index=0,target_begin=0,target_len=1953125,target_name=crypt,target_version=1.23.0, allow_discards=y,same_cpu=n,submit_from_crypt_cpus=n,no_read_workqueue=n,no_write_workqueue=n, iv_large_sectors=n,cipher_string=aes-xts-plain64,key_size=32,key_parts=1,key_extra_size=0,key_mac_size=0;”h]”hXtarget_attributes := "," "," "," "," "," "," "," "," "," [ ","] [ ","] [ ","] [ ","] "," "," "," ";" target_name := "target_name=crypt" target_version := "target_version=" "." "." allow_discards := "allow_discards=" same_cpu_crypt := "same_cpu_crypt=" submit_from_crypt_cpus := "submit_from_crypt_cpus=" no_read_workqueue := "no_read_workqueue=" no_write_workqueue := "no_write_workqueue=" iv_large_sectors := "iv_large_sectors=" integrity_tag_size := "integrity_tag_size=" cipher_auth := "cipher_auth=" sector_size := "sector_size=" cipher_string := "cipher_string=" key_size := "key_size=" key_parts := "key_parts=" key_extra_size := "key_extra_size=" key_mac_size := "key_mac_size=" yes_no := "y" | "n" E.g. When a 'crypt' target is loaded, then IMA ASCII measurement log will have an entry similar to the following, depicting what 'crypt' attributes are measured in EVENT_DATA for 'dm_table_load' event. (converted from ASCII to text for readability) dm_version=4.45.0; name=crypt1,uuid=crypt_uuid1,major=253,minor=0,minor_count=1,num_targets=1; target_index=0,target_begin=0,target_len=1953125,target_name=crypt,target_version=1.23.0, allow_discards=y,same_cpu=n,submit_from_crypt_cpus=n,no_read_workqueue=n,no_write_workqueue=n, iv_large_sectors=n,cipher_string=aes-xts-plain64,key_size=32,key_parts=1,key_extra_size=0,key_mac_size=0;”…”�”}”hjÒsbah}”(h]”h ]”h"]”h$]”h&]”j‰jŠuh1jyh³hÊh´M~hj³h²hubeh}”(h]”Œcrypt”ah ]”h"]”Œ2. crypt”ah$]”h&]”uh1hµhjeh²hh³hÊh´Mxubh¶)�”}”(hhh]”(h»)�”}”(hŒ 3. integrity”h]”hŒ 3. integrity”…”�”}”(hjëh²hh³Nh´Nubah}”(h]”h ]”h"]”h$]”h&]”uh1hºhjèh²hh³hÊh´M£ubhÌ)�”}”(hŒ�The 'target_attributes' (described as part of EVENT_DATA in 'Table load' section above) has the following data format for 'integrity' target.”h]”hŒ™The ‘target_attributes’ (described as part of EVENT_DATA in ‘Table load’ section above) has the following data format for ‘integrity’ target.”…”�”}”(hjùh²hh³Nh´Nubah}”(h]”h ]”h"]”h$]”h&]”uh1hËh³hÊh´M¤hjèh²hubjz)�”}”(hX*target_attributes := "," "," "," "," "," [ ","] [ ","] "," "," "," "," "," "," "," "," ";" target_name := "target_name=integrity" target_version := "target_version=" "." "." dev_name := "dev_name=" start := "start=" tag_size := "tag_size=" mode := "mode=" integrity_mode_str := "J" | "B" | "D" | "R" meta_device := "meta_device=" block_size := "block_size=" recalculate := "recalculate=" allow_discards := "allow_discards=" allow_discards_keyed := "allow_discards_keyed=" fix_padding := "fix_padding=" fix_hmac := "fix_hmac=" legacy_recalculate := "legacy_recalculate=" journal_sectors := "journal_sectors=" interleave_sectors := "interleave_sectors=" buffer_sectors := "buffer_sectors=" yes_no := "y" | "n" E.g. When a 'integrity' target is loaded, then IMA ASCII measurement log will have an entry similar to the following, depicting what 'integrity' attributes are measured in EVENT_DATA for 'dm_table_load' event. (converted from ASCII to text for readability) dm_version=4.45.0; name=integrity1,uuid=,major=253,minor=1,minor_count=1,num_targets=1; target_index=0,target_begin=0,target_len=7856,target_name=integrity,target_version=1.10.0, dev_name=253:0,start=0,tag_size=32,mode=J,recalculate=n,allow_discards=n, allow_discards_keyed=n,fix_padding=n, fix_hmac=n,legacy_recalculate=n,journal_sectors=88,interleave_sectors=32768,buffer_sectors=128;”h]”hX*target_attributes := "," "," "," "," "," [ ","] [ ","] "," "," "," "," "," "," "," "," ";" target_name := "target_name=integrity" target_version := "target_version=" "." "." dev_name := "dev_name=" start := "start=" tag_size := "tag_size=" mode := "mode=" integrity_mode_str := "J" | "B" | "D" | "R" meta_device := "meta_device=" block_size := "block_size=" recalculate := "recalculate=" allow_discards := "allow_discards=" allow_discards_keyed := "allow_discards_keyed=" fix_padding := "fix_padding=" fix_hmac := "fix_hmac=" legacy_recalculate := "legacy_recalculate=" journal_sectors := "journal_sectors=" interleave_sectors := "interleave_sectors=" buffer_sectors := "buffer_sectors=" yes_no := "y" | "n" E.g. When a 'integrity' target is loaded, then IMA ASCII measurement log will have an entry similar to the following, depicting what 'integrity' attributes are measured in EVENT_DATA for 'dm_table_load' event. (converted from ASCII to text for readability) dm_version=4.45.0; name=integrity1,uuid=,major=253,minor=1,minor_count=1,num_targets=1; target_index=0,target_begin=0,target_len=7856,target_name=integrity,target_version=1.10.0, dev_name=253:0,start=0,tag_size=32,mode=J,recalculate=n,allow_discards=n, allow_discards_keyed=n,fix_padding=n, fix_hmac=n,legacy_recalculate=n,journal_sectors=88,interleave_sectors=32768,buffer_sectors=128;”…”�”}”hjsbah}”(h]”h ]”h"]”h$]”h&]”j‰jŠuh1jyh³hÊh´M©hjèh²hubeh}”(h]”Œ integrity”ah ]”h"]”Œ 3. integrity”ah$]”h&]”uh1hµhjeh²hh³hÊh´M£ubh¶)�”}”(hhh]”(h»)�”}”(hŒ 4. linear”h]”hŒ 4. linear”…”�”}”(hj h²hh³Nh´Nubah}”(h]”h ]”h"]”h$]”h&]”uh1hºhjh²hh³hÊh´MÒubhÌ)�”}”(hŒŠThe 'target_attributes' (described as part of EVENT_DATA in 'Table load' section above) has the following data format for 'linear' target.”h]”hŒ–The ‘target_attributes’ (described as part of EVENT_DATA in ‘Table load’ section above) has the following data format for ‘linear’ target.”…”�”}”(hj.h²hh³Nh´Nubah}”(h]”h ]”h"]”h$]”h&]”uh1hËh³hÊh´MÓhjh²hubjz)�”}”(hX×target_attributes := "," "," <,> ";" target_name := "target_name=linear" target_version := "target_version=" "." "." device_name := "device_name=" start := "start=" E.g. When a 'linear' target is loaded, then IMA ASCII measurement log will have an entry similar to the following, depicting what 'linear' attributes are measured in EVENT_DATA for 'dm_table_load' event. (converted from ASCII to text for readability) dm_version=4.45.0; name=linear1,uuid=linear_uuid1,major=253,minor=2,minor_count=1,num_targets=1; target_index=0,target_begin=0,target_len=28672,target_name=linear,target_version=1.4.0, device_name=253:1,start=2048;”h]”hX×target_attributes := "," "," <,> ";" target_name := "target_name=linear" target_version := "target_version=" "." "." device_name := "device_name=" start := "start=" E.g. When a 'linear' target is loaded, then IMA ASCII measurement log will have an entry similar to the following, depicting what 'linear' attributes are measured in EVENT_DATA for 'dm_table_load' event. (converted from ASCII to text for readability) dm_version=4.45.0; name=linear1,uuid=linear_uuid1,major=253,minor=2,minor_count=1,num_targets=1; target_index=0,target_begin=0,target_len=28672,target_name=linear,target_version=1.4.0, device_name=253:1,start=2048;”…”�”}”hj<sbah}”(h]”h ]”h"]”h$]”h&]”j‰jŠuh1jyh³hÊh´MØhjh²hubeh}”(h]”Œlinear”ah ]”h"]”Œ 4. linear”ah$]”h&]”uh1hµhjeh²hh³hÊh´MÒubh¶)�”}”(hhh]”(h»)�”}”(hŒ 5. mirror”h]”hŒ 5. mirror”…”�”}”(hjUh²hh³Nh´Nubah}”(h]”h ]”h"]”h$]”h&]”uh1hºhjRh²hh³hÊh´MëubhÌ)�”}”(hŒŠThe 'target_attributes' (described as part of EVENT_DATA in 'Table load' section above) has the following data format for 'mirror' target.”h]”hŒ–The ‘target_attributes’ (described as part of EVENT_DATA in ‘Table load’ section above) has the following data format for ‘mirror’ target.”…”�”}”(hjch²hh³Nh´Nubah}”(h]”h ]”h"]”h$]”h&]”uh1hËh³hÊh´MìhjRh²hubjz)�”}”(hXÀtarget_attributes := "," "," "," "," "," "," ";" target_name := "target_name=mirror" target_version := "target_version=" "." "." nr_mirrors := "nr_mirrors=" mirror_device_data := | mirror_device_row is repeated times - for described in . mirror_device_row := "," mirror_device_name := "mirror_device_" "=" where ranges from 0 to ( -1) - for described in . mirror_device_status := "mirror_device_" "_status=" where ranges from 0 to ( -1) - for described in . mirror_device_status_char := "A" | "F" | "D" | "S" | "R" | "U" handle_errors := "handle_errors=" keep_log := "keep_log=" log_type_status := "log_type_status=" yes_no := "y" | "n" E.g. When a 'mirror' target is loaded, then IMA ASCII measurement log will have an entry similar to the following, depicting what 'mirror' attributes are measured in EVENT_DATA for 'dm_table_load' event. (converted from ASCII to text for readability) dm_version=4.45.0; name=mirror1,uuid=mirror_uuid1,major=253,minor=6,minor_count=1,num_targets=1; target_index=0,target_begin=0,target_len=2048,target_name=mirror,target_version=1.14.0,nr_mirrors=2, mirror_device_0=253:4,mirror_device_0_status=A, mirror_device_1=253:5,mirror_device_1_status=A, handle_errors=y,keep_log=n,log_type_status=;”h]”hXÀtarget_attributes := "," "," "," "," "," "," ";" target_name := "target_name=mirror" target_version := "target_version=" "." "." nr_mirrors := "nr_mirrors=" mirror_device_data := | mirror_device_row is repeated times - for described in . mirror_device_row := "," mirror_device_name := "mirror_device_" "=" where ranges from 0 to ( -1) - for described in . mirror_device_status := "mirror_device_" "_status=" where ranges from 0 to ( -1) - for described in . mirror_device_status_char := "A" | "F" | "D" | "S" | "R" | "U" handle_errors := "handle_errors=" keep_log := "keep_log=" log_type_status := "log_type_status=" yes_no := "y" | "n" E.g. When a 'mirror' target is loaded, then IMA ASCII measurement log will have an entry similar to the following, depicting what 'mirror' attributes are measured in EVENT_DATA for 'dm_table_load' event. (converted from ASCII to text for readability) dm_version=4.45.0; name=mirror1,uuid=mirror_uuid1,major=253,minor=6,minor_count=1,num_targets=1; target_index=0,target_begin=0,target_len=2048,target_name=mirror,target_version=1.14.0,nr_mirrors=2, mirror_device_0=253:4,mirror_device_0_status=A, mirror_device_1=253:5,mirror_device_1_status=A, handle_errors=y,keep_log=n,log_type_status=;”…”�”}”hjqsbah}”(h]”h ]”h"]”h$]”h&]”j‰jŠuh1jyh³hÊh´MñhjRh²hubeh}”(h]”Œmirror”ah ]”h"]”Œ 5. mirror”ah$]”h&]”uh1hµhjeh²hh³hÊh´Mëubh¶)�”}”(hhh]”(h»)�”}”(hŒ 6. multipath”h]”hŒ 6. multipath”…”�”}”(hjŠh²hh³Nh´Nubah}”(h]”h ]”h"]”h$]”h&]”uh1hºhj‡h²hh³hÊh´MubhÌ)�”}”(hŒ�The 'target_attributes' (described as part of EVENT_DATA in 'Table load' section above) has the following data format for 'multipath' target.”h]”hŒ™The ‘target_attributes’ (described as part of EVENT_DATA in ‘Table load’ section above) has the following data format for ‘multipath’ target.”…”�”}”(hj˜h²hh³Nh´Nubah}”(h]”h ]”h"]”h$]”h&]”uh1hËh³hÊh´Mhj‡h²hubjz)�”}”(hXÒtarget_attributes := "," "," ["," "," "," ] ";" target_name := "target_name=multipath" target_version := "target_version=" "." "." nr_priority_groups := "nr_priority_groups=" priority_groups := | priority_groups_row := "pg_state_" "=" "," "nr_pgpaths_" "=" "," "path_selector_name_" "=" "," where ranges from 0 to ( -1) - for described in . pg_state_str := "E" | "A" | "D" := | priority_group_paths_row := "path_name_" "_" "=" "," "is_active_" "_" "=" "fail_count_" "_" "=" "," "path_selector_status_" "_" "=" where ranges from 0 to ( -1) - for described in , and ranges from 0 to ( -1) - for described in . is_active_str := "A" | "F" E.g. When a 'multipath' target is loaded, then IMA ASCII measurement log will have an entry similar to the following, depicting what 'multipath' attributes are measured in EVENT_DATA for 'dm_table_load' event. (converted from ASCII to text for readability) dm_version=4.45.0; name=mp,uuid=,major=253,minor=0,minor_count=1,num_targets=1; target_index=0,target_begin=0,target_len=2097152,target_name=multipath,target_version=1.14.0,nr_priority_groups=2, pg_state_0=E,nr_pgpaths_0=2,path_selector_name_0=queue-length, path_name_0_0=8:16,is_active_0_0=A,fail_count_0_0=0,path_selector_status_0_0=, path_name_0_1=8:32,is_active_0_1=A,fail_count_0_1=0,path_selector_status_0_1=, pg_state_1=E,nr_pgpaths_1=2,path_selector_name_1=queue-length, path_name_1_0=8:48,is_active_1_0=A,fail_count_1_0=0,path_selector_status_1_0=, path_name_1_1=8:64,is_active_1_1=A,fail_count_1_1=0,path_selector_status_1_1=;”h]”hXÒtarget_attributes := "," "," ["," "," "," ] ";" target_name := "target_name=multipath" target_version := "target_version=" "." "." nr_priority_groups := "nr_priority_groups=" priority_groups := | priority_groups_row := "pg_state_" "=" "," "nr_pgpaths_" "=" "," "path_selector_name_" "=" "," where ranges from 0 to ( -1) - for described in . pg_state_str := "E" | "A" | "D" := | priority_group_paths_row := "path_name_" "_" "=" "," "is_active_" "_" "=" "fail_count_" "_" "=" "," "path_selector_status_" "_" "=" where ranges from 0 to ( -1) - for described in , and ranges from 0 to ( -1) - for described in . is_active_str := "A" | "F" E.g. When a 'multipath' target is loaded, then IMA ASCII measurement log will have an entry similar to the following, depicting what 'multipath' attributes are measured in EVENT_DATA for 'dm_table_load' event. (converted from ASCII to text for readability) dm_version=4.45.0; name=mp,uuid=,major=253,minor=0,minor_count=1,num_targets=1; target_index=0,target_begin=0,target_len=2097152,target_name=multipath,target_version=1.14.0,nr_priority_groups=2, pg_state_0=E,nr_pgpaths_0=2,path_selector_name_0=queue-length, path_name_0_0=8:16,is_active_0_0=A,fail_count_0_0=0,path_selector_status_0_0=, path_name_0_1=8:32,is_active_0_1=A,fail_count_0_1=0,path_selector_status_0_1=, pg_state_1=E,nr_pgpaths_1=2,path_selector_name_1=queue-length, path_name_1_0=8:48,is_active_1_0=A,fail_count_1_0=0,path_selector_status_1_0=, path_name_1_1=8:64,is_active_1_1=A,fail_count_1_1=0,path_selector_status_1_1=;”…”�”}”hj¦sbah}”(h]”h ]”h"]”h$]”h&]”j‰jŠuh1jyh³hÊh´Mhj‡h²hubeh}”(h]”Œ multipath”ah ]”h"]”Œ 6. multipath”ah$]”h&]”uh1hµhjeh²hh³hÊh´Mubh¶)�”}”(hhh]”(h»)�”}”(hŒ7. raid”h]”hŒ7. raid”…”�”}”(hj¿h²hh³Nh´Nubah}”(h]”h ]”h"]”h$]”h&]”uh1hºhj¼h²hh³hÊh´M;ubhÌ)�”}”(hŒˆThe 'target_attributes' (described as part of EVENT_DATA in 'Table load' section above) has the following data format for 'raid' target.”h]”hŒ”The ‘target_attributes’ (described as part of EVENT_DATA in ‘Table load’ section above) has the following data format for ‘raid’ target.”…”�”}”(hjÍh²hh³Nh´Nubah}”(h]”h ]”h"]”h$]”h&]”uh1hËh³hÊh´M<hj¼h²hubjz)�”}”(hXhtarget_attributes := "," "," "," "," ["," journal_dev_mode] ";" target_name := "target_name=raid" target_version := "target_version=" "." "." raid_type := "raid_type=" raid_disks := "raid_disks=" raid_state := "raid_state=" raid_state_str := "frozen" | "reshape" |"resync" | "check" | "repair" | "recover" | "idle" |"undef" raid_device_status := | is repeated times - for described in . raid_device_status_row := "raid_device_" "_status=" where ranges from 0 to ( -1) - for described in . raid_device_status_str := "A" | "D" | "a" | "-" journal_dev_mode := "journal_dev_mode=" journal_dev_mode_str := "writethrough" | "writeback" | "invalid" E.g. When a 'raid' target is loaded, then IMA ASCII measurement log will have an entry similar to the following, depicting what 'raid' attributes are measured in EVENT_DATA for 'dm_table_load' event. (converted from ASCII to text for readability) dm_version=4.45.0; name=raid_LV1,uuid=uuid_raid_LV1,major=253,minor=12,minor_count=1,num_targets=1; target_index=0,target_begin=0,target_len=2048,target_name=raid,target_version=1.15.1, raid_type=raid10,raid_disks=4,raid_state=idle, raid_device_0_status=A, raid_device_1_status=A, raid_device_2_status=A, raid_device_3_status=A;”•�=h]”hXhtarget_attributes := "," "," "," "," ["," journal_dev_mode] ";" target_name := "target_name=raid" target_version := "target_version=" "." "." raid_type := "raid_type=" raid_disks := "raid_disks=" raid_state := "raid_state=" raid_state_str := "frozen" | "reshape" |"resync" | "check" | "repair" | "recover" | "idle" |"undef" raid_device_status := | is repeated times - for described in . raid_device_status_row := "raid_device_" "_status=" where ranges from 0 to ( -1) - for described in . raid_device_status_str := "A" | "D" | "a" | "-" journal_dev_mode := "journal_dev_mode=" journal_dev_mode_str := "writethrough" | "writeback" | "invalid" E.g. When a 'raid' target is loaded, then IMA ASCII measurement log will have an entry similar to the following, depicting what 'raid' attributes are measured in EVENT_DATA for 'dm_table_load' event. (converted from ASCII to text for readability) dm_version=4.45.0; name=raid_LV1,uuid=uuid_raid_LV1,major=253,minor=12,minor_count=1,num_targets=1; target_index=0,target_begin=0,target_len=2048,target_name=raid,target_version=1.15.1, raid_type=raid10,raid_disks=4,raid_state=idle, raid_device_0_status=A, raid_device_1_status=A, raid_device_2_status=A, raid_device_3_status=A;”…”�”}”hjÛsbah}”(h]”h ]”h"]”h$]”h&]”j‰jŠuh1jyh³hÊh´MAhj¼h²hubeh}”(h]”Œraid”ah ]”h"]”Œ7. raid”ah$]”h&]”uh1hµhjeh²hh³hÊh´M;ubh¶)�”}”(hhh]”(h»)�”}”(hŒ 8. snapshot”h]”hŒ 8. snapshot”…”�”}”(hjôh²hh³Nh´Nubah}”(h]”h ]”h"]”h$]”h&]”uh1hºhjñh²hh³hÊh´McubhÌ)�”}”(hŒŒThe 'target_attributes' (described as part of EVENT_DATA in 'Table load' section above) has the following data format for 'snapshot' target.”h]”hŒ˜The ‘target_attributes’ (described as part of EVENT_DATA in ‘Table load’ section above) has the following data format for ‘snapshot’ target.”…”�”}”(hjh²hh³Nh´Nubah}”(h]”h ]”h"]”h$]”h&]”uh1hËh³hÊh´Mdhjñh²hubjz)�”}”(hX:target_attributes := "," "," "," "," "," "," ";" target_name := "target_name=snapshot" target_version := "target_version=" "." "." snap_origin_name := "snap_origin_name=" snap_cow_name := "snap_cow_name=" snap_valid := "snap_valid=" snap_merge_failed := "snap_merge_failed=" snapshot_overflowed := "snapshot_overflowed=" yes_no := "y" | "n" E.g. When a 'snapshot' target is loaded, then IMA ASCII measurement log will have an entry similar to the following, depicting what 'snapshot' attributes are measured in EVENT_DATA for 'dm_table_load' event. (converted from ASCII to text for readability) dm_version=4.45.0; name=snap1,uuid=snap_uuid1,major=253,minor=13,minor_count=1,num_targets=1; target_index=0,target_begin=0,target_len=4096,target_name=snapshot,target_version=1.16.0, snap_origin_name=253:11,snap_cow_name=253:12,snap_valid=y,snap_merge_failed=n,snapshot_overflowed=n;”h]”hX:target_attributes := "," "," "," "," "," "," ";" target_name := "target_name=snapshot" target_version := "target_version=" "." "." snap_origin_name := "snap_origin_name=" snap_cow_name := "snap_cow_name=" snap_valid := "snap_valid=" snap_merge_failed := "snap_merge_failed=" snapshot_overflowed := "snapshot_overflowed=" yes_no := "y" | "n" E.g. When a 'snapshot' target is loaded, then IMA ASCII measurement log will have an entry similar to the following, depicting what 'snapshot' attributes are measured in EVENT_DATA for 'dm_table_load' event. (converted from ASCII to text for readability) dm_version=4.45.0; name=snap1,uuid=snap_uuid1,major=253,minor=13,minor_count=1,num_targets=1; target_index=0,target_begin=0,target_len=4096,target_name=snapshot,target_version=1.16.0, snap_origin_name=253:11,snap_cow_name=253:12,snap_valid=y,snap_merge_failed=n,snapshot_overflowed=n;”…”�”}”hjsbah}”(h]”h ]”h"]”h$]”h&]”j‰jŠuh1jyh³hÊh´Mihjñh²hubeh}”(h]”Œsnapshot”ah ]”h"]”Œ 8. snapshot”ah$]”h&]”uh1hµhjeh²hh³hÊh´Mcubh¶)�”}”(hhh]”(h»)�”}”(hŒ 9. striped”h]”hŒ 9. striped”…”�”}”(hj)h²hh³Nh´Nubah}”(h]”h ]”h"]”h$]”h&]”uh1hºhj&h²hh³hÊh´M�ubhÌ)�”}”(hŒ‹The 'target_attributes' (described as part of EVENT_DATA in 'Table load' section above) has the following data format for 'striped' target.”h]”hŒ—The ‘target_attributes’ (described as part of EVENT_DATA in ‘Table load’ section above) has the following data format for ‘striped’ target.”…”�”}”(hj7h²hh³Nh´Nubah}”(h]”h ]”h"]”h$]”h&]”uh1hËh³hÊh´M‚hj&h²hubjz)�”}”(hX target_attributes := "," "," "," "," ";" target_name := "target_name=striped" target_version := "target_version=" "." "." stripes := "stripes=" chunk_size := "chunk_size=" stripe_data := | stripe_data_row := "," "," stripe_device_name := "stripe_" "_device_name=" where ranges from 0 to ( -1) - for described in . stripe_physical_start := "stripe_" "_physical_start=" where ranges from 0 to ( -1) - for described in . stripe_status := "stripe_" "_status=" where ranges from 0 to ( -1) - for described in . stripe_status_str := "D" | "A" E.g. When a 'striped' target is loaded, then IMA ASCII measurement log will have an entry similar to the following, depicting what 'striped' attributes are measured in EVENT_DATA for 'dm_table_load' event. (converted from ASCII to text for readability) dm_version=4.45.0; name=striped1,uuid=striped_uuid1,major=253,minor=5,minor_count=1,num_targets=1; target_index=0,target_begin=0,target_len=640,target_name=striped,target_version=1.6.0,stripes=2,chunk_size=64, stripe_0_device_name=253:0,stripe_0_physical_start=2048,stripe_0_status=A, stripe_1_device_name=253:3,stripe_1_physical_start=2048,stripe_1_status=A;”h]”hX target_attributes := "," "," "," "," ";" target_name := "target_name=striped" target_version := "target_version=" "." "." stripes := "stripes=" chunk_size := "chunk_size=" stripe_data := | stripe_data_row := "," "," stripe_device_name := "stripe_" "_device_name=" where ranges from 0 to ( -1) - for described in . stripe_physical_start := "stripe_" "_physical_start=" where ranges from 0 to ( -1) - for described in . stripe_status := "stripe_" "_status=" where ranges from 0 to ( -1) - for described in . stripe_status_str := "D" | "A" E.g. When a 'striped' target is loaded, then IMA ASCII measurement log will have an entry similar to the following, depicting what 'striped' attributes are measured in EVENT_DATA for 'dm_table_load' event. (converted from ASCII to text for readability) dm_version=4.45.0; name=striped1,uuid=striped_uuid1,major=253,minor=5,minor_count=1,num_targets=1; target_index=0,target_begin=0,target_len=640,target_name=striped,target_version=1.6.0,stripes=2,chunk_size=64, stripe_0_device_name=253:0,stripe_0_physical_start=2048,stripe_0_status=A, stripe_1_device_name=253:3,stripe_1_physical_start=2048,stripe_1_status=A;”…”�”}”hjEsbah}”(h]”h ]”h"]”h$]”h&]”j‰jŠuh1jyh³hÊh´M‡hj&h²hubeh}”(h]”Œstriped”ah ]”h"]”Œ 9. striped”ah$]”h&]”uh1hµhjeh²hh³hÊh´M�ubh¶)�”}”(hhh]”(h»)�”}”(hŒ 10. verity”h]”hŒ 10. verity”…”�”}”(hj^h²hh³Nh´Nubah}”(h]”h ]”h"]”h$]”h&]”uh1hºhj[h²hh³hÊh´M¥ubhÌ)�”}”(hŒŠThe 'target_attributes' (described as part of EVENT_DATA in 'Table load' section above) has the following data format for 'verity' target.”h]”hŒ–The ‘target_attributes’ (described as part of EVENT_DATA in ‘Table load’ section above) has the following data format for ‘verity’ target.”…”�”}”(hjlh²hh³Nh´Nubah}”(h]”h ]”h"]”h$]”h&]”uh1hËh³hÊh´M¦hj[h²hubjz)�”}”(hX’target_attributes := "," "," "," "," "," "," "," "," "," "," ["," ] ["," ] ";" target_name := "target_name=verity" target_version := "target_version=" "." "." hash_failed := "hash_failed=" hash_failed_str := "C" | "V" verity_version := "verity_version=" data_device_name := "data_device_name=" hash_device_name := "hash_device_name=" verity_algorithm := "verity_algorithm=" root_digest := "root_digest=" salt := "salt=" salt_str := "-" ignore_zero_blocks := "ignore_zero_blocks=" check_at_most_once := "check_at_most_once=" root_hash_sig_key_desc := "root_hash_sig_key_desc=" verity_mode := "verity_mode=" verity_mode_str := "ignore_corruption" | "restart_on_corruption" | "panic_on_corruption" | "invalid" yes_no := "y" | "n" E.g. When a 'verity' target is loaded, then IMA ASCII measurement log will have an entry similar to the following, depicting what 'verity' attributes are measured in EVENT_DATA for 'dm_table_load' event. (converted from ASCII to text for readability) dm_version=4.45.0; name=test-verity,uuid=,major=253,minor=2,minor_count=1,num_targets=1; target_index=0,target_begin=0,target_len=1953120,target_name=verity,target_version=1.8.0,hash_failed=V, verity_version=1,data_device_name=253:1,hash_device_name=253:0,verity_algorithm=sha256, root_digest=29cb87e60ce7b12b443ba6008266f3e41e93e403d7f298f8e3f316b29ff89c5e, salt=e48da609055204e89ae53b655ca2216dd983cf3cb829f34f63a297d106d53e2d, ignore_zero_blocks=n,check_at_most_once=n;”h]”hX’target_attributes := "," "," "," "," "," "," "," "," "," "," ["," ] ["," ] ";" target_name := "target_name=verity" target_version := "target_version=" "." "." hash_failed := "hash_failed=" hash_failed_str := "C" | "V" verity_version := "verity_version=" data_device_name := "data_device_name=" hash_device_name := "hash_device_name=" verity_algorithm := "verity_algorithm=" root_digest := "root_digest=" salt := "salt=" salt_str := "-" ignore_zero_blocks := "ignore_zero_blocks=" check_at_most_once := "check_at_most_once=" root_hash_sig_key_desc := "root_hash_sig_key_desc=" verity_mode := "verity_mode=" verity_mode_str := "ignore_corruption" | "restart_on_corruption" | "panic_on_corruption" | "invalid" yes_no := "y" | "n" E.g. When a 'verity' target is loaded, then IMA ASCII measurement log will have an entry similar to the following, depicting what 'verity' attributes are measured in EVENT_DATA for 'dm_table_load' event. (converted from ASCII to text for readability) dm_version=4.45.0; name=test-verity,uuid=,major=253,minor=2,minor_count=1,num_targets=1; target_index=0,target_begin=0,target_len=1953120,target_name=verity,target_version=1.8.0,hash_failed=V, verity_version=1,data_device_name=253:1,hash_device_name=253:0,verity_algorithm=sha256, root_digest=29cb87e60ce7b12b443ba6008266f3e41e93e403d7f298f8e3f316b29ff89c5e, salt=e48da609055204e89ae53b655ca2216dd983cf3cb829f34f63a297d106d53e2d, ignore_zero_blocks=n,check_at_most_once=n;”…”�”}”hjzsbah}”(h]”h ]”h"]”h$]”h&]”j‰jŠuh1jyh³hÊh´M«hj[h²hubeh}”(h]”Œverity”ah ]”h"]”Œ 10. verity”ah$]”h&]”uh1hµhjeh²hh³hÊh´M¥ubeh}”(h]”Œsupported-targets”ah ]”h"]”Œsupported targets:”ah$]”h&]”uh1hµhh·h²hh³hÊh´MEubeh}”(h]”Œdm-ima”ah ]”h"]”Œdm-ima”ah$]”h&]”uh1hµhhh²hh³hÊh´Kubeh}”(h]”h ]”h"]”h$]”h&]”Œsource”hÊuh1hŒcurrent_source”NŒ current_line”NŒsettings”Œdocutils.frontend”ŒValues”“”)�”}”(hºNŒ generator”NŒ datestamp”NŒ source_link”NŒ source_url”NŒ toc_backlinks”Œentry”Œfootnote_backlinks”KŒ sectnum_xform”KŒstrip_comments”NŒstrip_elements_with_classes”NŒ strip_classes”NŒ report_level”KŒ halt_level”KŒexit_status_level”KŒdebug”NŒwarning_stream”NŒ traceback”ˆŒinput_encoding”Œ utf-8-sig”Œinput_encoding_error_handler”Œstrict”Œoutput_encoding”Œutf-8”Œoutput_encoding_error_handler”jÃŒerror_encoding”Œutf-8”Œerror_encoding_error_handler”Œbackslashreplace”Œ language_code”Œen”Œrecord_dependencies”NŒconfig”NŒ id_prefix”hŒauto_id_prefix”Œid”Œ dump_settings”NŒdump_internals”NŒdump_transforms”NŒdump_pseudo_xml”NŒexpose_internals”NŒstrict_visitor”NŒ_disable_config”NŒ_source”hÊŒ _destination”NŒ _config_files”]”Œ7/var/lib/git/docbuild/linux/Documentation/docutils.conf”aŒfile_insertion_enabled”ˆŒ raw_enabled”KŒline_length_limit”M'Œpep_references”NŒ pep_base_url”Œhttps://peps.python.org/”Œpep_file_url_template”Œpep-%04d”Œrfc_references”NŒ rfc_base_url”Œ&https://datatracker.ietf.org/doc/html/”Œ tab_width”KŒtrim_footnote_reference_space”‰Œsyntax_highlight”Œlong”Œ smart_quotes”ˆŒsmartquotes_locales”]”Œcharacter_level_inline_markup”‰Œdoctitle_xform”‰Œ docinfo_xform”KŒsectsubtitle_xform”‰Œ image_loading”Œlink”Œembed_stylesheet”‰Œcloak_email_addresses”ˆŒsection_self_link”‰Œenv”NubŒreporter”NŒindirect_targets”]”Œsubstitution_defs”}”Œsubstitution_names”}”Œrefnames”}”Œrefids”}”Œnameids”}”(j�jšj\jYjbj_jNjKj‘jŽjÔjÑjjjZjWj•j’j°j­jåjâjjjOjLj„j�j¹j¶jîjëj#j jXjUj�jŠuŒ nametypes”}”(j�‰j\‰jb‰jN‰j‘‰jÔ‰j‰jZ‰j•‰j°‰jå‰j‰jO‰j„‰j¹‰jî‰j#‰jX‰j�‰uh}”(jšh·jYjZj_j_jKjjŽjQjÑj”jj×jWjj’jej­j~jâj³jjèjLjj�jRj¶j‡jëj¼j jñjUj&jŠj[uŒ footnote_refs”}”Œ citation_refs”}”Œ autofootnotes”]”Œautofootnote_refs”]”Œsymbol_footnotes”]”Œsymbol_footnote_refs”]”Œ footnotes”]”Œ citations”]”Œautofootnote_start”KŒsymbol_footnote_start”KŒ id_counter”Œ collections”ŒCounter”“”}”…”R”Œparse_messages”]”Œtransform_messages”]”Œ transformer”NŒ include_log”]”Œ decoration”Nh²hub.