[PATCH RESEND] integrity: Extract secure boot enquiry function out of IMA

[Alexander Gordeev]

On Thu, Jun 26, 2025 at 10:36:17AM +0800, GONG Ruiqi wrote:

Hi GONG,

...
> Compile-tested for powerpc, s390 and x86, all with allmodconfig.

This breaks defconfig and debug_defconfig builds on s390
since IMA_ARCH_POLICY=n in these configurations and thus
CONFIG_IMA_SECURE_AND_OR_TRUSTED_BOOT=n as well:

s390x-15.1.0-ld: security/integrity/ima/ima_main.o: in function `ima_load_data':
/home/agordeev/linux.c3/security/integrity/ima/ima_main.c:902:(.text+0x54e): undefined reference to `arch_integrity_get_secureboot'
s390x-15.1.0-ld: security/integrity/ima/ima_appraise.o: in function `ima_appraise_parse_cmdline':
/home/agordeev/linux.c3/security/integrity/ima/ima_appraise.c:30:(.init.text+0x44): undefined reference to `arch_integrity_get_secureboot'
make[2]: *** [scripts/Makefile.vmlinux:91: vmlinux.unstripped] Error 1
make[1]: *** [/home/agordeev/linux.c3/Makefile:1236: vmlinux] Error 2
make: *** [Makefile:248: __sub-make] Error 2

> Signed-off-by: GONG Ruiqi <gongruiqi1 at huawei.com>

Thanks!