Re: [PATCH v4] ima: silence measurement list hexdump during kexec

From: Mimi Zohar
Date: Wed Jan 05 2022 - 08:35:52 EST


On Tue, 2021-12-28 at 23:03 -0300, Bruno Meneguele wrote:
> Direclty calling print_hex_dump() dumps the IMA measurement list on soft

^Directly

> resets (kexec) straight to the syslog (kmsg/dmesg) without considering the
> DEBUG flag or the dynamic debug state, causing the output to be always
> printed, including during boot time.
>
> Since this output is only valid for IMA debugging, but not necessary on
> normal kexec operation, print_hex_dump_debug() adheres to the pr_debug()
> behavior: the dump is only printed to syslog when DEBUG is defined or when
> explicitly requested by the user through dynamic debugging.
>
> Signed-off-by: Bruno Meneguele <bmeneg@xxxxxxxxxx>

Thanks, Bruno. This patch is now queued in #next-integrity-testing.

Mimi