GRUB-IMA

This is the enhancement of Linux boot loader, GRUB for adding the TCG measurement capability. It supports TCG compliant PCs with TPM 1.1b and 1.2. Main features are:

  • Measurement during the process of loading Grub
  • Stage 1 measures the first sector of the stage 1.5 (or stage 2). Stage 1(=MBR) itself is measured by BIOS just when it is loaded.
  • The first sector of stage 1.5 (or stage 2) measures the remaining sectors. Stage 1.5 measures the stage 2, too.
  • Just after the Grub is booted, it measures the configuration file named grub.conf. Then it measures a number of files in the sequence specified in this configuration file.

Environment:

  • TCG 1.1b compliant PC. BIOS INT 1Ah/AX=0BBxxh must be supported.
  • TCG functions must be enabled in the BIOS setting.

Links
GNU GRUB http://www.gnu.org/software/grub/grub.html
GNU GRUB Mailing List Archive http://lists.gnu.org/archive/html/bug-grub/
TCG https://www.trustedcomputinggroup.org/home
OLD Instruction http://trousers.sourceforge.net/grub.html

List of Patches

distro patch
original 0.97
RHEL5/CentOS5 http://sourceforge.net/projects/trousers/files/Grub-IMA/0.97-13-ima-1.1.0.0/grub-0.97-13-ima-1.1.0.0.tgz/download
Fedora 7
Fedora 8
Fedora 9
Fedora 10 http://sourceforge.jp/projects/openpts/downloads/40294/grub-0.97-38.fc10.ima-1.1.0.0.patch/
Fedora 11
Ubuntu 8.10 http://sourceforge.jp/projects/openpts/downloads/37646/grub-0.97-29ubuntu45-ima-1.1.0.0.patch/
Ubuntu 9.04 use above patch

How to build/install/use

RPM

TBD

DEB

TBD