From: Jiri Bohac <jbohac@suse.cz>
To: Lianbo Jiang <lijiang@redhat.com>
Cc: linux-kernel@vger.kernel.org, kexec@lists.infradead.org,
akpm@linux-foundation.org, ebiederm@xmission.com,
jmorris@namei.org, mjg59@google.com, dyoung@redhat.com,
bhe@redhat.com
Subject: Re: [PATCH v2] kexec: Do not verify the signature without the lockdown or mandatory signature
Date: Tue, 2 Jun 2020 13:45:48 +0200 [thread overview]
Message-ID: <20200602114548.2yevcdfsho4it75u@dwarf.suse.cz> (raw)
In-Reply-To: <20200602045952.27487-1-lijiang@redhat.com>
On Tue, Jun 02, 2020 at 12:59:52PM +0800, Lianbo Jiang wrote:
> So, here, let's simplify the logic to improve code readability. If the
> KEXEC_SIG_FORCE enabled or kexec lockdown enabled, signature verification
> is mandated. Otherwise, we lift the bar for any kernel image.
>
> Signed-off-by: Lianbo Jiang <lijiang@redhat.com>
Reviewed-by: Jiri Bohac <jbohac@suse.cz>
--
Jiri Bohac <jbohac@suse.cz>
SUSE Labs, Prague, Czechia
WARNING: multiple messages have this Message-ID (diff)
From: Jiri Bohac <jbohac@suse.cz>
To: Lianbo Jiang <lijiang@redhat.com>
Cc: bhe@redhat.com, kexec@lists.infradead.org, jmorris@namei.org,
mjg59@google.com, linux-kernel@vger.kernel.org,
ebiederm@xmission.com, akpm@linux-foundation.org,
dyoung@redhat.com
Subject: Re: [PATCH v2] kexec: Do not verify the signature without the lockdown or mandatory signature
Date: Tue, 2 Jun 2020 13:45:48 +0200 [thread overview]
Message-ID: <20200602114548.2yevcdfsho4it75u@dwarf.suse.cz> (raw)
In-Reply-To: <20200602045952.27487-1-lijiang@redhat.com>
On Tue, Jun 02, 2020 at 12:59:52PM +0800, Lianbo Jiang wrote:
> So, here, let's simplify the logic to improve code readability. If the
> KEXEC_SIG_FORCE enabled or kexec lockdown enabled, signature verification
> is mandated. Otherwise, we lift the bar for any kernel image.
>
> Signed-off-by: Lianbo Jiang <lijiang@redhat.com>
Reviewed-by: Jiri Bohac <jbohac@suse.cz>
--
Jiri Bohac <jbohac@suse.cz>
SUSE Labs, Prague, Czechia
_______________________________________________
kexec mailing list
kexec@lists.infradead.org
http://lists.infradead.org/mailman/listinfo/kexec
next prev parent reply other threads:[~2020-06-02 11:45 UTC|newest]
Thread overview: 14+ messages / expand[flat|nested] mbox.gz Atom feed top
2020-06-02 4:59 [PATCH v2] kexec: Do not verify the signature without the lockdown or mandatory signature Lianbo Jiang
2020-06-02 4:59 ` Lianbo Jiang
2020-06-02 11:45 ` Jiri Bohac [this message]
2020-06-02 11:45 ` Jiri Bohac
2020-06-03 9:56 ` Dave Young
2020-06-03 9:56 ` Dave Young
2020-06-08 7:40 ` Baoquan He
2020-06-08 7:40 ` Baoquan He
2020-06-10 8:21 ` lijiang
2020-06-10 8:21 ` lijiang
2020-06-17 19:37 ` Andrew Morton
2020-06-17 19:37 ` Andrew Morton
2020-06-18 9:58 ` lijiang
2020-06-18 9:58 ` lijiang
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20200602114548.2yevcdfsho4it75u@dwarf.suse.cz \
--to=jbohac@suse.cz \
--cc=akpm@linux-foundation.org \
--cc=bhe@redhat.com \
--cc=dyoung@redhat.com \
--cc=ebiederm@xmission.com \
--cc=jmorris@namei.org \
--cc=kexec@lists.infradead.org \
--cc=lijiang@redhat.com \
--cc=linux-kernel@vger.kernel.org \
--cc=mjg59@google.com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.