All of lore.kernel.org
 help / color / mirror / Atom feed
From: Vivek Goyal <vgoyal@redhat.com>
To: Simon Horman <horms@verge.net.au>
Cc: Kexec Mailing List <kexec@lists.infradead.org>,
	Dave Young <dyoung@redhat.com>, Baoquan He <bhe@redhat.com>,
	WANG Chao <chaowang@redhat.com>
Subject: Re: [PATCH V2] kexec: Provide an option to use new kexec system call
Date: Wed, 27 Aug 2014 09:04:39 -0400	[thread overview]
Message-ID: <20140827130438.GA6744@redhat.com> (raw)
In-Reply-To: <20140827075936.GA5936@verge.net.au>

On Wed, Aug 27, 2014 at 04:59:37PM +0900, Simon Horman wrote:
> On Tue, Aug 26, 2014 at 10:30:34AM -0400, Vivek Goyal wrote:
> > On Mon, Aug 18, 2014 at 11:22:32AM -0400, Vivek Goyal wrote:
> > > Hi,
> > > 
> > > This is v2 of the patch. Since v1, I moved syscall implemented check littler
> > > earlier in the function as per the feedback.
> > > 
> > > Now a new kexec syscall (kexec_file_load()) has been merged in upstream
> > > kernel. This system call takes file descriptors of kernel and initramfs
> > > as input (as opposed to list of segments to be loaded). This new system
> > > call allows for signature verification of the kernel being loaded.
> > > 
> > > One use of signature verification of kernel is secureboot systems where
> > > we want to allow kexec into a kernel only if it is validly signed by
> > > a key system trusts.
> > > 
> > > This patch provides and option --kexec-file-syscall (-s), to force use of
> > > new system call for kexec. Default is to continue to use old syscall.
> > > 
> > > Currently only bzImage64 on x86_64 can be loaded using this system call.
> > > As kernel adds support for more arches and for more image types, kexec-tools
> > > can be modified accordingly.
> > > 
> > 
> > Hi Simon,
> > 
> > Do you have any concerns with this patch? If not, can you please consider
> > it for merge.
> 
> Thanks, applied.

Thanks Simon. Have you pushed it out yet. git pull does not show anything.

Thanks
Vivek

_______________________________________________
kexec mailing list
kexec@lists.infradead.org
http://lists.infradead.org/mailman/listinfo/kexec

  reply	other threads:[~2014-08-27 13:05 UTC|newest]

Thread overview: 7+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2014-08-18 15:22 [PATCH V2] kexec: Provide an option to use new kexec system call Vivek Goyal
2014-08-19  9:15 ` Baoquan He
2014-08-26 14:30 ` Vivek Goyal
2014-08-27  7:59   ` Simon Horman
2014-08-27 13:04     ` Vivek Goyal [this message]
2014-08-27 14:04       ` Simon Horman
2014-08-27 14:15         ` Vivek Goyal

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=20140827130438.GA6744@redhat.com \
    --to=vgoyal@redhat.com \
    --cc=bhe@redhat.com \
    --cc=chaowang@redhat.com \
    --cc=dyoung@redhat.com \
    --cc=horms@verge.net.au \
    --cc=kexec@lists.infradead.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body. 
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.