| commit | 268a78404973594d1a7ec3a2b6a2474e0543a435 | [log] [tgz] |
|---|---|---|
| author | Philipp Rudo <prudo@linux.ibm.com> | Tue Mar 26 15:45:53 2019 +0100 |
| committer | Martin Schwidefsky <schwidefsky@de.ibm.com> | Mon Apr 29 10:44:03 2019 +0200 |
| tree | a8eefe8904c63e1b342e226a263d749f60aa3da0 | |
| parent | 99feaa717e558cf4f2ad0faf53acac3cf9cc7438 [diff] |
s390/kexec_file: Disable kexec_load when IPLed secure A kernel loaded via kexec_load cannot be verified. Thus disable kexec_load systemcall in kernels which where IPLed securely. Use the IMA mechanism to do so. Signed-off-by: Philipp Rudo <prudo@linux.ibm.com> Signed-off-by: Martin Schwidefsky <schwidefsky@de.ibm.com>