diff options
| author | Linus Torvalds <torvalds@linux-foundation.org> | 2022-01-11 13:11:10 -0800 |
|---|---|---|
| committer | Linus Torvalds <torvalds@linux-foundation.org> | 2022-01-11 13:11:10 -0800 |
| commit | 84bfcc0b6994057905cf98d2c5cedef48b3322b5 (patch) | |
| tree | 8e2d4095dc6ee28bf08ec6d7e2c15fa2f9db850c /fs/namespace.c | |
| parent | 5d7e52237c59e37a25da854196fc70e9b09704d9 (diff) | |
| parent | 65e38e32a959dbbb0bf5cf1ae699789f81759be6 (diff) | |
Merge tag 'integrity-v5.17' of git://git.kernel.org/pub/scm/linux/kernel/git/zohar/linux-integrity
Pull integrity subsystem updates from Mimi Zohar:
"The few changes are all kexec related:
- The MOK keys are loaded onto the .platform keyring in order to
verify the kexec kernel image signature.
However, the MOK keys should only be trusted when secure boot is
enabled. Before loading the MOK keys onto the .platform keyring,
make sure the system is booted in secure boot mode.
- When carrying the IMA measurement list across kexec, limit dumping
the measurement list to when dynamic debug or CONFIG_DEBUG is
enabled.
- kselftest: add kexec_file_load selftest support for PowerNV and
other cleanup"
* tag 'integrity-v5.17' of git://git.kernel.org/pub/scm/linux/kernel/git/zohar/linux-integrity:
selftests/kexec: Enable secureboot tests for PowerPC
ima: silence measurement list hexdump during kexec
selftests/kexec: update searching for the Kconfig
selftest/kexec: fix "ignored null byte in input" warning
integrity: Do not load MOK and MOKx when secure boot be disabled
ima: Fix undefined arch_ima_get_secureboot() and co
Diffstat (limited to 'fs/namespace.c')
0 files changed, 0 insertions, 0 deletions