[PATCH V2] ima: do not copy measurement list to kdump kernel

Baoquan He bhe at redhat.com
Thu May 15 20:27:54 PDT 2025


On 05/14/25 at 08:40am, Mimi Zohar wrote:
> On Tue, 2025-05-13 at 07:31 -0700, steven chen wrote:
> > From: Steven Chen <chenste at linux.microsoft.com>
> > 
> > Kdump kernel doesn't need IMA to do integrity measurement.
> > Hence the measurement list in 1st kernel doesn't need to be copied to
> > kdump kernel.
> > 
> > Here skip allocating buffer for measurement list copying if loading
> > kdump kernel. Then there won't be the later handling related to
> > ima_kexec_buffer.
> > 
> > Signed-off-by: Steven Chen <chenste at linux.microsoft.com>
> > Tested-by: Baoquan He <bhe at redhat.com>
> > Acked-by: Baoquan He <bhe at redhat.com>
> 
> Thanks, Boaquan, Steven.
> 
> This patch is now queued in next-integrity and next-integrity-testing.

Thanks for taking care of this.




More information about the kexec mailing list