Re: [PATCH 08/30] kexec_file: Restrict at runtime if the kernel is locked down

From: Jiri Bohac
Date: Thu Feb 22 2018 - 14:14:39 EST


On Thu, Feb 22, 2018 at 02:21:53PM +0000, David Howells wrote:
> commit ed0424c531d7dd25adebdec0ee6a78a5784f207a
> Author: David Howells <dhowells@xxxxxxxxxx>
> Date: Thu Feb 22 14:01:49 2018 +0000
>
> kexec_file: Restrict at runtime if the kernel is locked down
>
> When KEXEC_VERIFY_SIG is not enabled, kernel should not load images through

s/KEXEC_VERIFY_SIG/KEXEC_SIG/
Again, my mistake :/

Other than that, looks OK. Much cleaner than my version. Thanks!

Reviewed-by: Jiri Bohac <jbohac@xxxxxxx>

--
Jiri Bohac <jbohac@xxxxxxx>
SUSE Labs, Prague, Czechia