Messages in this thread Patch in this message | | | From | Bruno Meneguele <> | Subject | [PATCH] ima: silence measurement list hexdump during kexec | Date | Wed, 22 Dec 2021 16:16:23 -0300 |
| |
The measurement list is dumped during a soft reset (kexec) through the call to "print_hex_dump(KERN_DEBUG, ...)", which ignores the DEBUG build flag. Instead, use "print_hex_dump_debug(...)", honoring the build flag.
Signed-off-by: Bruno Meneguele <bmeneg@redhat.com> --- security/integrity/ima/ima_kexec.c | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-)
diff --git a/security/integrity/ima/ima_kexec.c b/security/integrity/ima/ima_kexec.c index f799cc278a9a..13753136f03f 100644 --- a/security/integrity/ima/ima_kexec.c +++ b/security/integrity/ima/ima_kexec.c @@ -61,9 +61,9 @@ static int ima_dump_measurement_list(unsigned long *buffer_size, void **buffer, } memcpy(file.buf, &khdr, sizeof(khdr)); - print_hex_dump(KERN_DEBUG, "ima dump: ", DUMP_PREFIX_NONE, - 16, 1, file.buf, - file.count < 100 ? file.count : 100, true); + print_hex_dump_debug("ima dump: ", DUMP_PREFIX_NONE, 16, 1, + file.buf, file.count < 100 ? file.count : 100, + true); *buffer_size = file.count; *buffer = file.buf; -- 2.33.1
| |