Re: [PATCH v2] kexec: Do not verify the signature without the lockdown or mandatory signature

[Jiri Bohac]

On Tue, Jun 02, 2020 at 12:59:52PM +0800, Lianbo Jiang wrote:
> So, here, let's simplify the logic to improve code readability. If the
> KEXEC_SIG_FORCE enabled or kexec lockdown enabled, signature verification
> is mandated. Otherwise, we lift the bar for any kernel image.
> 
> Signed-off-by: Lianbo Jiang <lijiang@xxxxxxxxxx>

Reviewed-by: Jiri Bohac <jbohac@xxxxxxx>

-- 
Jiri Bohac <jbohac@xxxxxxx>
SUSE Labs, Prague, Czechia