[PATCH v2 0/6] Appended signatures support for IMA appraisal

Michael Ellerman mpe at ellerman.id.au
Tue Jun 13 20:18:51 AEST 2017


Thiago Jung Bauermann <bauerman at linux.vnet.ibm.com> writes:

> Michael Ellerman <mpe at ellerman.id.au> writes:
>
>> Thiago Jung Bauermann <bauerman at linux.vnet.ibm.com> writes:
>>
>>> On the OpenPOWER platform, secure boot and trusted boot are being
>>> implemented using IMA for taking measurements and verifying signatures.
>>
>> I still want you to implement arch_kexec_kernel_verify_sig() as well :)
>
> Yes, I will implement it! We are still working on loading the public
> keys for kernel signing from the firmware into a kernel keyring, so
> there's not much point in implementing arch_kexec_kernel_verify_sig
> without having that first.

OK. What's the ETA on those patches?

cheers


More information about the Linuxppc-dev mailing list