Hello I want to find linux ima/evm log file

Asked by LeeKiwoong on 2017-03-15

I want to find linux ima/evm log file

The ima log file is the result of a successful or failed ima validation

If you have a log file, tell me where it is.

If there is no log file, is there a way to check for a success or failure message?

Thank you for your help

Question information

Language:
English Edit question
Status:
Answered
For:
Ubuntu linux Edit question
Assignee:
No assignee Edit question
Last query:
2017-03-15
Last reply:
2017-03-15
Manfred Hampl (m-hampl) said : #1

Log files usually are stored in the /var/log directory.

I am not sure whether the ima/evm verification puts anything into the log files (have never used that myself).
Browsing through some related source files http://bazaar.launchpad.net/~ubuntu-branches/ubuntu/vivid/ima-evm-utils/vivid/view/head:/src/libimaevm.c is see several log_err and log_info calls. So I assume that failed verification would show up in one of the system log files.

Can you help with this problem?

Provide an answer of your own, or ask LeeKiwoong for more information if necessary.

To post a message you must log in.