Re: [PATCH] ima: clean up IMA_MEASURE_PCR_IDX in Kconfig

On Sat, 2026-08-22 at 01:15 +0100, Julian Braha wrote:
> The IMA_MEASURE_PCR_IDX option is not visible for users to set, so it
> always uses its default, 10. This means that the 'range 8 14' is dead
> code, and the "If unsure, use the default 10" in the help text is
> misleading because the user *has no other choice*.
> 
> During the first patch submission to add this option in 2008 [1],
> the submitter originally gave this option a prompt:
> 
> "PCR for Aggregate (8 <= Index <= 14)"
> 
> then later removed it in the revision, without adjusting the rest of the
> option accordingly [2].
> 
> Let's clean up this of this IMA_MEASURE_PCR_IDX config option to be
> consistent with its current, non-visible state.
> 
> This dead range was found by kconfirm, a static analysis tool for Kconfig.
> 
> Signed-off-by: Julian Braha <[email protected]>

The PCR index can be specified as a Kconfig IMA_MEASURE_PCR_IDX and on
individual policy records via the "pcr=" option.

Mimi