[PATCH V8 3/3] Call ima_kexec_cmdline to measure the cmdline args
Mimi Zohar
zohar at linux.ibm.com
Thu Jun 13 20:20:04 UTC 2019
On Wed, 2019-06-12 at 15:15 -0700, Prakhar Srivastava wrote:
> During soft reboot(kexec_file_load) boot cmdline args
Any reason for not spelling it out and using the "boot command line"?
> are not measured.Thus the new kernel on load boots with
> an assumption of cold reboot.
Double spaces after a period.
What does "boots with an assumption of cold reboot" mean? Not all
systems are booted the same way. Is this comment relevant?
>
> This patch makes a call to the ima hook ima_kexec_cmdline,
> added in "Define a new IMA hook to measure the boot command
> line arguments"
"added in ..." is unnecessry.
> to measure the boot cmdline args into the ima log.
^IMA measurement list.
Mimi
More information about the Linux-security-module-archive
mailing list