kernel/tools/testing/selftests/ima, branch linux-5.1.yHosts the 0x221E linux distro kernel.https://universe.0xinfinity.dev/distro/kernel/atom?h=linux-5.1.y2018-12-11T12:19:47Zselftests/ima: kexec_load syscall test2018-12-11T12:19:47ZMimi Zoharzohar@linux.ibm.com2018-11-14T17:30:19Zurn:sha1:a802ed0dd9c2607cc219574e881062d43ea3b7e0
The kernel CONFIG_KEXEC_VERIFY_SIG option is limited to verifying a
kernel image's signature, when loaded via the kexec_file_load syscall.
There is no method for verifying a kernel image's signature loaded
via the kexec_load syscall.
This test verifies loading the kernel image via the kexec_load syscall
fails when the kernel CONFIG_KEXEC_VERIFY_SIG option is enabled on
systems with secureboot enabled[1].
[1] Detecting secureboot enabled is architecture specific.
Signed-off-by: Mimi Zohar <zohar@linux.ibm.com>