[PATCH 08/30] kexec_file: Restrict at runtime if the kernel is locked down

[Jiri Bohac]

On Thu, Feb 22, 2018 at 02:21:53PM +0000, David Howells wrote:
> commit ed0424c531d7dd25adebdec0ee6a78a5784f207a
> Author: David Howells <dhowells at redhat.com>
> Date:   Thu Feb 22 14:01:49 2018 +0000
> 
>     kexec_file: Restrict at runtime if the kernel is locked down
>     
>     When KEXEC_VERIFY_SIG is not enabled, kernel should not load images through

s/KEXEC_VERIFY_SIG/KEXEC_SIG/
Again, my mistake :/

Other than that, looks OK. Much cleaner than my version. Thanks!

Reviewed-by: Jiri Bohac <jbohac at suse.cz>

-- 
Jiri Bohac <jbohac at suse.cz>
SUSE Labs, Prague, Czechia

--
To unsubscribe from this list: send the line "unsubscribe linux-security-module" in
the body of a message to majordomo at vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html