[PATCH] ima: Kdump kernel doesn't need IMA to do integrity measurement

Mimi Zohar zohar at linux.ibm.com
Tue May 13 11:41:27 UTC 2025


Hi Steven,

On Fri, 2025-05-02 at 13:03 -0700, steven chen wrote:
> From: Steven Chen <chenste at linux.microsoft.com>
> 
> Kdump kernel doesn't need IMA to do integrity measurement.
> Hence the measurement list in 1st kernel doesn't need to be copied to
> kdump kenrel.

^kernel

Please use "scripts/checkpatch.pl --codespell" to check for typos.

Mimi

> 
> Here skip allocating buffer for measurement list copying if loading
> kdump kernel. Then there won't be the later handling related to
> ima_kexec_buffer.
> 
> Signed-off-by: Steven Chen <chenste at linux.microsoft.com>





More information about the Linux-security-module-archive mailing list