]> asedeno.scripts.mit.edu Git - linux.git/commit
projects / linux.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 99feaa7) | patch
s390/kexec_file: Disable kexec_load when IPLed secure
authorPhilipp Rudo <prudo@linux.ibm.com>
Tue, 26 Mar 2019 14:45:53 +0000 (15:45 +0100)
committerMartin Schwidefsky <schwidefsky@de.ibm.com>
Mon, 29 Apr 2019 08:44:03 +0000 (10:44 +0200)
commit268a78404973594d1a7ec3a2b6a2474e0543a435
treea8eefe8904c63e1b342e226a263d749f60aa3da0tree | snapshot
parent99feaa717e558cf4f2ad0faf53acac3cf9cc7438commit | diff
s390/kexec_file: Disable kexec_load when IPLed secure

A kernel loaded via kexec_load cannot be verified. Thus disable kexec_load
systemcall in kernels which where IPLed securely. Use the IMA mechanism to
do so.

Signed-off-by: Philipp Rudo <prudo@linux.ibm.com>
Signed-off-by: Martin Schwidefsky <schwidefsky@de.ibm.com>
arch/s390/kernel/Makefile diff | blob | history
arch/s390/kernel/ima_arch.c [new file with mode: 0644] blob
include/linux/ima.h diff | blob | history
local clone of linux.git