Description: IMA maintains hash values for sensitive files. If used, the TPM (Trusted Platform Module) stores an aggregate integrity value over this set.

IMA measures a file and stores the measure (hash); it can appraise a file to compare a measurement versus a 'good value'; it can also be used for audit.

Internal Link:

• file explorer

External links:

• https://sourceforge.net/p/linux-ima/wiki/Home
• White paper - Linux Integrity Overview (PDF)