[PATCH V2] ima: do not copy measurement list to kdump kernel

Mimi Zohar zohar at linux.ibm.com
Wed May 14 05:40:39 PDT 2025


On Tue, 2025-05-13 at 07:31 -0700, steven chen wrote:
> From: Steven Chen <chenste at linux.microsoft.com>
> 
> Kdump kernel doesn't need IMA to do integrity measurement.
> Hence the measurement list in 1st kernel doesn't need to be copied to
> kdump kernel.
> 
> Here skip allocating buffer for measurement list copying if loading
> kdump kernel. Then there won't be the later handling related to
> ima_kexec_buffer.
> 
> Signed-off-by: Steven Chen <chenste at linux.microsoft.com>
> Tested-by: Baoquan He <bhe at redhat.com>
> Acked-by: Baoquan He <bhe at redhat.com>

Thanks, Boaquan, Steven.

This patch is now queued in next-integrity and next-integrity-testing.

Mimi




More information about the kexec mailing list