• Eric Richter's avatar
    x86/ima: define arch_get_ima_policy() for x86 · d958083a
    Eric Richter authored
    On x86, there are two methods of verifying a kexec'ed kernel image
    signature being loaded via the kexec_file_load syscall - an architecture
    specific implementaton or a IMA KEXEC_KERNEL_CHECK appraisal rule. Neither
    of these methods verify the kexec'ed kernel image signature being loaded
    via the kexec_load syscall.
    
    Secure boot enabled systems require kexec images to be signed. Therefore,
    this patch loads an IMA KEXEC_KERNEL_CHECK policy rule on secure boot
    enabled systems not configured with CONFIG_KEXEC_VERIFY_SIG enabled.
    
    When IMA_APPRAISE_BOOTPARAM is configured, different IMA appraise modes
    (eg. fix, log) can be specified on the boot command line, allowing unsigned
    or invalidly signed kernel images to be kexec'ed. This patch permits
    enabling IMA_APPRAISE_BOOTPARAM or IMA_ARCH_POLICY, but not both.
    Signed-off-by: default avatarEric Richter <erichte@linux.ibm.com>
    Signed-off-by: default avatarNayna Jain <nayna@linux.ibm.com>
    Cc: David Howells <dhowells@redhat.com>
    Cc: Eric Biederman <ebiederm@xmission.com>
    Cc: Peter Jones <pjones@redhat.com>
    Cc: Vivek Goyal <vgoyal@redhat.com>
    Cc: Dave Young <dyoung@redhat.com>
    Signed-off-by: default avatarMimi Zohar <zohar@linux.ibm.com>
    d958083a
Kconfig 9.53 KB