[PATCH RESEND] integrity: Extract secure boot enquiry function out of IMA

[GONG Ruiqi]

On 2025/06/27 23:56, Alexander Gordeev wrote:
> On Thu, Jun 26, 2025 at 10:36:17AM +0800, GONG Ruiqi wrote:
> 
> Hi GONG,
> 
> ...
>> Compile-tested for powerpc, s390 and x86, all with allmodconfig.
> 
> This breaks defconfig and debug_defconfig builds on s390
> since IMA_ARCH_POLICY=n in these configurations and thus
> CONFIG_IMA_SECURE_AND_OR_TRUSTED_BOOT=n as well:

Hi Alexander,

Thanks for the feedback! I'll fix it and send a V2 asap.

BR,
Ruiqi

> 
> s390x-15.1.0-ld: security/integrity/ima/ima_main.o: in function `ima_load_data':
> /home/agordeev/linux.c3/security/integrity/ima/ima_main.c:902:(.text+0x54e): undefined reference to `arch_integrity_get_secureboot'
> s390x-15.1.0-ld: security/integrity/ima/ima_appraise.o: in function `ima_appraise_parse_cmdline':
> /home/agordeev/linux.c3/security/integrity/ima/ima_appraise.c:30:(.init.text+0x44): undefined reference to `arch_integrity_get_secureboot'
> make[2]: *** [scripts/Makefile.vmlinux:91: vmlinux.unstripped] Error 1
> make[1]: *** [/home/agordeev/linux.c3/Makefile:1236: vmlinux] Error 2
> make: *** [Makefile:248: __sub-make] Error 2
> 
>> Signed-off-by: GONG Ruiqi <gongruiqi1 at huawei.com>
> 
> Thanks!