[PATCH V2] ima: do not copy measurement list to kdump kernel
Baoquan He
bhe at redhat.com
Thu May 15 20:27:54 PDT 2025
On 05/14/25 at 08:40am, Mimi Zohar wrote:
> On Tue, 2025-05-13 at 07:31 -0700, steven chen wrote:
> > From: Steven Chen <chenste at linux.microsoft.com>
> >
> > Kdump kernel doesn't need IMA to do integrity measurement.
> > Hence the measurement list in 1st kernel doesn't need to be copied to
> > kdump kernel.
> >
> > Here skip allocating buffer for measurement list copying if loading
> > kdump kernel. Then there won't be the later handling related to
> > ima_kexec_buffer.
> >
> > Signed-off-by: Steven Chen <chenste at linux.microsoft.com>
> > Tested-by: Baoquan He <bhe at redhat.com>
> > Acked-by: Baoquan He <bhe at redhat.com>
>
> Thanks, Boaquan, Steven.
>
> This patch is now queued in next-integrity and next-integrity-testing.
Thanks for taking care of this.
More information about the kexec
mailing list