Dear Linux folks,


With Linux 4.16-rc7 [1] on a TUXEDO Book BU1406 with an Intel Kaby Lake 
processor, `init_ima` takes 112 ms to execute according to 
`initcall_debug`. That is quite a long time, and it’d be great to reduce 
that.

```
[    0.426588] calling  init_ima+0x0/0x3a @ 1
[    0.541706] initcall init_ima+0x0/0x3a returned 0 after 112414 usecs
```

The Ubuntu kernel configuration has `CONFIG_IMA=y`, and it be great, if 
users could decrease the boot time without having to rebuild the Linux 
kernel.

What options are there?

1.  Add an option to disable IMA from the Linux kernel command line, for 
example with `ima.disable`?

2.  Do the initialization asynchronously? (At least from the Linux 
messages it looks like, it’s ordered.)

3.  Add a debug option to make it easier to find out what takes so long?


Kind regards,

Paul


[1] http://kernel.ubuntu.com/~kernel-ppa/mainline/v4.16-rc7/