From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1755224AbbCMNGJ (ORCPT ); Fri, 13 Mar 2015 09:06:09 -0400 Received: from mail.skyhub.de ([78.46.96.112]:51084 "EHLO mail.skyhub.de" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1750769AbbCMNGG (ORCPT ); Fri, 13 Mar 2015 09:06:06 -0400 From: Borislav Petkov To: LKML Cc: Thomas Gleixner , Ingo Molnar , "H. Peter Anvin" , Andrew Morton , Vivek Goyal Subject: [PATCH] x86/kexec: Cleanup KEXEC_VERIFY_SIG Kconfig help text Date: Fri, 13 Mar 2015 14:04:37 +0100 Message-Id: <1426251877-11415-1-git-send-email-bp@alien8.de> X-Mailer: git-send-email 2.2.0.33.gc18b867 Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org From: Borislav Petkov Make it much simpler without losing the gist of what it says. Signed-off-by: Borislav Petkov Cc: Thomas Gleixner Cc: Ingo Molnar Cc: "H. Peter Anvin" Cc: Andrew Morton Cc: Vivek Goyal --- arch/x86/Kconfig | 13 +++++-------- 1 file changed, 5 insertions(+), 8 deletions(-) diff --git a/arch/x86/Kconfig b/arch/x86/Kconfig index 8f829ffb9003..8db84b0e5bbd 100644 --- a/arch/x86/Kconfig +++ b/arch/x86/Kconfig @@ -1775,14 +1775,11 @@ config KEXEC_VERIFY_SIG depends on KEXEC_FILE ---help--- This option makes kernel signature verification mandatory for - kexec_file_load() syscall. If kernel is signature can not be - verified, kexec_file_load() will fail. - - This option enforces signature verification at generic level. - One needs to enable signature verification for type of kernel - image being loaded to make sure it works. For example, enable - bzImage signature verification option to be able to load and - verify signatures of bzImage. Otherwise kernel loading will fail. + the kexec_file_load() syscall. + + In addition to that option, you need to enable signature + verification for the corresponding kernel image type being + loaded in order for this to work. config KEXEC_BZIMAGE_VERIFY_SIG bool "Enable bzImage signature verification support" -- 2.2.0.33.gc18b867