[RESEND PATCH v1 1/1] s390/kexec: Make KEXEC_SIG available when CONFIG_MODULES=n
Alexander Egorenkov
egorenar at linux.ibm.com
Tue Feb 10 06:01:23 PST 2026
>> > diff --git a/arch/s390/Kconfig b/arch/s390/Kconfig
>> > index c2c7bf974397..385c1052cf45 100644
>> > --- a/arch/s390/Kconfig
>> > +++ b/arch/s390/Kconfig
>> > @@ -313,7 +313,7 @@ config ARCH_SUPPORTS_KEXEC_FILE
>> > def_bool y
>> >
>> > config ARCH_SUPPORTS_KEXEC_SIG
>> > - def_bool MODULE_SIG_FORMAT
>> > + def_bool y
>> >
>> > config ARCH_SUPPORTS_KEXEC_PURGATORY
>> > def_bool y
>> > diff --git a/kernel/Kconfig.kexec b/kernel/Kconfig.kexec
>> > index 15632358bcf7..df97227cfca9 100644
>> > --- a/kernel/Kconfig.kexec
>> > +++ b/kernel/Kconfig.kexec
>> > @@ -50,6 +50,7 @@ config KEXEC_SIG
>> > bool "Verify kernel signature during kexec_file_load() syscall"
>> > depends on ARCH_SUPPORTS_KEXEC_SIG
>> > depends on KEXEC_FILE
>> > + select SYSTEM_DATA_VERIFICATION if S390
>
> Alexander, would it make sense to move this to arch/s390/Kconfig and
> add something like
>
> select SYSTEM_DATA_VERIFICATION if KEXEC_SIG
>
> instead? This would have the slight advantage to keep arch specifics
> out of common code Kconfig.
That's even better, what i was actually looking for.
And works as expected too.
Thanks, Heiko.
More information about the kexec
mailing list