Coiby Xu af16df54b8 ima: force signature verification when CONFIG_KEXEC_SIG is configured ... Currently, an unsigned kernel could be kexec'ed when IMA arch specific policy is configured unless lockdown is enabled. Enforce kernel signature verification check in the kexec_file_load syscall when IMA arch specific policy is configured. Fixes: 99d5cadfde2b ("kexec_file: split KEXEC_VERIFY_SIG into KEXEC_SIG and KEXEC_SIG_FORCE") Reported-and-suggested-by: Mimi Zohar <zohar@linux.ibm.com> Signed-off-by: Coiby Xu <coxu@redhat.com> Signed-off-by: Mimi Zohar <zohar@linux.ibm.com>		2022-07-13 10:13:41 -04:00
..
acpi	cxl for 5.19	2022-05-27 21:24:19 -07:00
asm-generic	kernel: add platform_has() infrastructure	2022-06-06 08:06:00 +02:00
clocksource	pwm: Changes for v5.19-rc1	2022-06-01 10:49:11 -07:00
crypto
drm	LoongArch: Add writecombine support for drm	2022-06-03 20:09:27 +08:00
dt-bindings	Char / Misc / Other smaller driver subsystem updates for 5.19-rc1	2022-06-03 11:36:34 -07:00
keys
kunit
kvm
linux	ima: force signature verification when CONFIG_KEXEC_SIG is configured	2022-07-13 10:13:41 -04:00
math-emu
media
memory
misc
net	Networking fixes for 5.19-rc2, including fixes from bpf and netfilter.	2022-06-09 12:06:52 -07:00
pcmcia
ras
rdma
scsi	SCSI misc on 20220524	2022-05-25 19:09:48 -07:00
soc	ARM: driver changes for 5.19	2022-05-26 10:32:47 -07:00
sound	ARM: multiplatform changes, part 2	2022-06-02 15:23:54 -07:00
target	SCSI misc on 20220524	2022-05-25 19:09:48 -07:00
trace	workqueue: Fix type of cpu in trace event	2022-06-07 07:09:47 -10:00
uapi	tls: Rename TLS_INFO_ZC_SENDFILE to TLS_INFO_ZC_TX	2022-06-09 21:51:57 -07:00
ufs
vdso
video	video: fbdev: radeon: Fix spelling typo in comment	2022-05-26 13:38:59 +02:00
xen	arm/xen: Assign xen-grant DMA ops for xen-grant DMA devices	2022-06-06 16:07:30 +02:00