Re: [PATCH 07/27] kexec_file: Disable at runtime if securelevel has been set
From: James Morris <hidden>
Date: 2017-10-20 23:26:40
Also in:
linux-security-module, lkml
On Thu, 19 Oct 2017, David Howells wrote:
From: Chun-Yi Lee <redacted> When KEXEC_VERIFY_SIG is not enabled, kernel should not loads image through kexec_file systemcall if securelevel has been set. This code was showed in Matthew's patch but not in git: https://lkml.org/lkml/2015/3/13/778
Reviewed-by: James Morris <redacted> -- James Morris [off-list ref]