Re: [PATCH v2 12/13] s390/kexec: refactor for kernel/Kconfig.kexec

From: Mimi Zohar
Date: Wed Jun 21 2023 - 18:24:17 EST


On Wed, 2023-06-21 at 07:00 +0200, Alexander Gordeev wrote:
> AFAICT the MODULE_SIG_FORMAT dependency was introduced with commit
> c8424e776b09 ("MODSIGN: Export module signature definitions") and
> in fact was not necessary, since s390 did/does not use mod_check_sig()
> anyway. So the SYSTEM_DATA_VERIFICATION could have left intact.

FYI, this patch was included in the patch set to allow IMA to verify
the kexec kernel image appended signature on OpenPOWER.

--
thanks,

Mimi