Re: [PATCH 08/30] kexec_file: Restrict at runtime if the kernel is locked down
From: Jiri Bohac
Date: Thu Feb 22 2018 - 14:14:39 EST
On Thu, Feb 22, 2018 at 02:21:53PM +0000, David Howells wrote:
> commit ed0424c531d7dd25adebdec0ee6a78a5784f207a
> Author: David Howells <dhowells@xxxxxxxxxx>
> Date: Thu Feb 22 14:01:49 2018 +0000
>
> kexec_file: Restrict at runtime if the kernel is locked down
>
> When KEXEC_VERIFY_SIG is not enabled, kernel should not load images through
s/KEXEC_VERIFY_SIG/KEXEC_SIG/
Again, my mistake :/
Other than that, looks OK. Much cleaner than my version. Thanks!
Reviewed-by: Jiri Bohac <jbohac@xxxxxxx>
--
Jiri Bohac <jbohac@xxxxxxx>
SUSE Labs, Prague, Czechia