Re: [PATCH v2] kexec: Do not verify the signature without the lockdown or mandatory signature

Jiri Bohac
2020-06-02T11:45:54Z

On Tue, Jun 02, 2020 at 12:59:52PM +0800, Lianbo Jiang wrote:
> So, here, let's simplify the logic to improve code readability. If the
> KEXEC_SIG_FORCE enabled or kexec lockdown enabled, signature verification
> is mandated. Otherwise, we lift the bar for any kernel image.
>
> Signed-off-by: Lianbo Jiang <lijiang@redhat.com>

Reviewed-by: Jiri Bohac <jbohac@suse.cz>

--
Jiri Bohac <jbohac@suse.cz>
SUSE Labs, Prague, Czechia