Mimi Zohar 16c267aac8 ima: based on policy require signed kexec kernel images ...

The original kexec_load syscall can not verify file signatures, nor can
the kexec image be measured.  Based on policy, deny the kexec_load
syscall.

Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>
Cc: Eric Biederman <ebiederm@xmission.com>
Cc: Kees Cook <keescook@chromium.org>
Reviewed-by: Kees Cook <keescook@chromium.org>
Signed-off-by: James Morris <james.morris@microsoft.com>

2018-07-16 12:31:57 -07:00

..

acpi

ACPI / processor: Finish making acpi_processor_ppc_has_changed() void

2018-06-20 10:50:40 +02:00

asm-generic

locking/qspinlock: Fix build for anonymous union in older GCC compilers

2018-06-22 04:19:16 +02:00

clocksource

…

crypto

…

drm

…

dt-bindings

Merge tag 'armsoc-drivers' of git://git.kernel.org/pub/scm/linux/kernel/git/arm/arm-soc

2018-06-11 18:15:22 -07:00

keys

docs: Fix some broken references

2018-06-15 18:10:01 -03:00

kvm

…

linux

ima: based on policy require signed kexec kernel images

2018-07-16 12:31:57 -07:00

math-emu

…

media

…

memory

…

misc

…

net

net/ipv6: respect rcu grace period before freeing fib6_info

2018-06-20 07:57:23 +09:00

pcmcia

…

ras

…

rdma

Merge tag 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/rdma/rdma

2018-06-21 07:22:30 +09:00

scsi

Merge tag 'scsi-misc' of git://git.kernel.org/pub/scm/linux/kernel/git/jejb/scsi

2018-06-10 13:01:12 -07:00

soc

Merge tag 'armsoc-late' of git://git.kernel.org/pub/scm/linux/kernel/git/arm/arm-soc

2018-06-11 18:19:45 -07:00

sound

…

target

…

trace

Merge tag 'nfs-for-4.18-1' of git://git.linux-nfs.org/projects/trondmy/linux-nfs

2018-06-12 10:09:03 -07:00

uapi

Merge tag 'for-linus-20180623' of git://git.kernel.dk/linux-block

2018-06-24 06:33:54 +08:00

video

Merge tag 'fbdev-v4.18' of git://github.com/bzolnier/linux

2018-06-17 05:00:24 +09:00

xen

Merge tag 'for-linus-4.18-rc2-tag' of git://git.kernel.org/pub/scm/linux/kernel/git/xen/tip

2018-06-23 20:44:11 +08:00