NFS Support for Linux Integrity Measurement Architecture
Explore a conference talk detailing the proposed extension of the NFS protocol to support the Linux Integrity Measurement Architecture (IMA). Delve into the design's strengths, limitations, and remaining challenges in implementing integrity measurement support for NFS. Learn about the complexities of extending protection from NFS servers to end users on NFS clients, enabling IMA-protected executable installation, and allowing different appraisal policies across NFS clients. Examine the technical considerations, including corruption detection methods, protocol support issues, and performance implications. Gain insights into the decision-making process for determining the effectiveness and completeness of the specified extension, as well as potential future developments such as IMA offload.