BMC/Intel-BMC/linux.git/arch/s390/kernel/ima_arch.c, branch dev-5.2 Intel OpenBMC Linux kernel source tree (mirror) https://git.radix-linux.su/BMC/Intel-BMC/linux.git/atom?h=dev-5.2 2019-04-29T08:44:03+00:00 s390/kexec_file: Disable kexec_load when IPLed secure 2019-04-29T08:44:03+00:00 Philipp Rudo prudo@linux.ibm.com 2019-03-26T14:45:53+00:00 urn:sha1:268a78404973594d1a7ec3a2b6a2474e0543a435 A kernel loaded via kexec_load cannot be verified. Thus disable kexec_load systemcall in kernels which where IPLed securely. Use the IMA mechanism to do so. Signed-off-by: Philipp Rudo <prudo@linux.ibm.com> Signed-off-by: Martin Schwidefsky <schwidefsky@de.ibm.com>