Messages in this thread | | | Date | Tue, 2 Jun 2020 13:45:48 +0200 | From | Jiri Bohac <> | Subject | Re: [PATCH v2] kexec: Do not verify the signature without the lockdown or mandatory signature |
| |
On Tue, Jun 02, 2020 at 12:59:52PM +0800, Lianbo Jiang wrote: > So, here, let's simplify the logic to improve code readability. If the > KEXEC_SIG_FORCE enabled or kexec lockdown enabled, signature verification > is mandated. Otherwise, we lift the bar for any kernel image. > > Signed-off-by: Lianbo Jiang <lijiang@redhat.com>
Reviewed-by: Jiri Bohac <jbohac@suse.cz>
-- Jiri Bohac <jbohac@suse.cz> SUSE Labs, Prague, Czechia
| |