From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mx0a-001b2d01.pphosted.com (mx0a-001b2d01.pphosted.com [148.163.156.1]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by lists.ozlabs.org (Postfix) with ESMTPS id 3rYVsT3kJ7zDqmf for ; Tue, 21 Jun 2016 11:45:01 +1000 (AEST) Received: from pps.filterd (m0098394.ppops.net [127.0.0.1]) by mx0a-001b2d01.pphosted.com (8.16.0.11/8.16.0.11) with SMTP id u5L1hc7h024268 for ; Mon, 20 Jun 2016 21:44:59 -0400 Received: from e24smtp01.br.ibm.com (e24smtp01.br.ibm.com [32.104.18.85]) by mx0a-001b2d01.pphosted.com with ESMTP id 23n2tb0aa6-1 (version=TLSv1.2 cipher=AES256-SHA bits=256 verify=NOT) for ; Mon, 20 Jun 2016 21:44:59 -0400 Received: from localhost by e24smtp01.br.ibm.com with IBM ESMTP SMTP Gateway: Authorized Use Only! Violators will be prosecuted for from ; Mon, 20 Jun 2016 22:44:56 -0300 Received: from d24relay01.br.ibm.com (d24relay01.br.ibm.com [9.8.31.16]) by d24dlp01.br.ibm.com (Postfix) with ESMTP id F36FC3520068 for ; Mon, 20 Jun 2016 21:44:36 -0400 (EDT) Received: from d24av02.br.ibm.com (d24av02.br.ibm.com [9.8.31.93]) by d24relay01.br.ibm.com (8.14.9/8.14.9/NCO v10.0) with ESMTP id u5L1irIs4444176 for ; Mon, 20 Jun 2016 22:44:53 -0300 Received: from d24av02.br.ibm.com (localhost [127.0.0.1]) by d24av02.br.ibm.com (8.14.4/8.14.4/NCO v10.0 AVout) with ESMTP id u5L1iqsi029915 for ; Mon, 20 Jun 2016 22:44:53 -0300 From: Thiago Jung Bauermann To: linuxppc-dev@lists.ozlabs.org Cc: kexec@lists.infradead.org, x86@kernel.org, linux-kernel@vger.kernel.org, Eric Biederman , Dave Young , Michael Ellerman , Mimi Zohar , Eric Richter , Thiago Jung Bauermann Subject: [PATCH 0/6] kexec_file: Add buffer hand-over for the next kernel Date: Mon, 20 Jun 2016 22:44:30 -0300 Message-Id: <1466473476-10104-1-git-send-email-bauerman@linux.vnet.ibm.com> List-Id: Linux on PowerPC Developers Mail List List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Hello, This patch series implements a mechanism which allows the kernel to pass on a buffer to the kernel that will be kexec'd. This buffer is passed as a segment which is added to the kimage when it is being prepared by kexec_file_load. How the second kernel is informed of this buffer is architecture-specific. On PowerPC, this is done via the device tree, by checking the properties /chosen/linux,kexec-handover-buffer-start and /chosen/linux,kexec-handover-buffer-end, which is analogous to how the kernel finds the initrd. This feature was implemented because the Integrity Measurement Architecture subsystem needs to preserve its measurement list accross the kexec reboot. This is so that IMA can implement trusted boot support on the OpenPower platform, because on such systems an intermediary Linux instance running as part of the firmware is used to boot the target operating system via kexec. Using this mechanism, IMA on this intermediary instance can hand over to the target OS the measurements of the components that were used to boot it. Because there could be additional measurement events between the kexec_file_load call and the actual reboot, IMA needs a way to update the buffer with those additional events before rebooting. One can minimize the interval between the kexec_file_load and the reboot syscalls, but as small as it can be, there is always the possibility that the measurement list will be out of date at the time of reboot. To address this issue, this patch series also introduces kexec_update_segment, which allows a reboot notifier to change the contents of the image segment during the reboot process. There's one patch which makes kimage_load_normal_segment and kexec_update_segment share code. It's not much code that they can share though, so I'm not sure if it's worth including this patch. The last patch is not intended to be merged, it just demonstrates how this feature can be used. This series applies on top of v2 of the "kexec_file_load implementation for PowerPC" patch series at: http://lists.infradead.org/pipermail/kexec/2016-June/016078.html Thiago Jung Bauermann (6): kexec_file: Add buffer hand-over support for the next kernel powerpc: kexec_file: Add buffer hand-over support for the next kernel kexec_file: Allow skipping checksum calculation for some segments. kexec_file: Add mechanism to update kexec segments. kexec: Share logic to copy segment page contents. IMA: Demonstration code for kexec buffer passing. arch/powerpc/include/asm/kexec.h | 9 ++ arch/powerpc/kernel/kexec_elf_64.c | 50 +++++++- arch/powerpc/kernel/machine_kexec_64.c | 64 ++++++++++ arch/x86/kernel/crash.c | 4 +- arch/x86/kernel/kexec-bzimage64.c | 6 +- include/linux/ima.h | 11 ++ include/linux/kexec.h | 47 +++++++- kernel/kexec_core.c | 205 ++++++++++++++++++++++++++------- kernel/kexec_file.c | 102 ++++++++++++++-- security/integrity/ima/ima.h | 5 + security/integrity/ima/ima_init.c | 26 +++++ security/integrity/ima/ima_template.c | 79 +++++++++++++ 12 files changed, 547 insertions(+), 61 deletions(-) -- 1.9.1