linux-stable.git/arch/s390/kernel/ima_arch.c, branch linux-rolling-stable Linux kernel stable tree s390/kexec_file: Disable kexec_load when IPLed secure 2019-04-29T08:44:03+00:00 Philipp Rudo prudo@linux.ibm.com 2019-03-26T14:45:53+00:00 268a78404973594d1a7ec3a2b6a2474e0543a435 A kernel loaded via kexec_load cannot be verified. Thus disable kexec_load systemcall in kernels which where IPLed securely. Use the IMA mechanism to do so. Signed-off-by: Philipp Rudo <prudo@linux.ibm.com> Signed-off-by: Martin Schwidefsky <schwidefsky@de.ibm.com> 
A kernel loaded via kexec_load cannot be verified. Thus disable kexec_load
systemcall in kernels which where IPLed securely. Use the IMA mechanism to
do so.

Signed-off-by: Philipp Rudo <prudo@linux.ibm.com>
Signed-off-by: Martin Schwidefsky <schwidefsky@de.ibm.com>