The kernel can be configured to verify PE signed kernel images, IMA kernel image signatures, both types of signatures, or none. Verify only properly signed kernel images are loaded into memory, based on the kernel configuration and runtime policies.
Mimi Zohar (3): selftest/ima: cleanup the kexec selftest scripts/ima: define a set of common functions selftests/ima: kexec_file_load syscall test tools/testing/selftests/ima/Makefile | 2 +- tools/testing/selftests/ima/common_lib.sh | 20 ++ .../testing/selftests/ima/test_kexec_file_load.sh | 250 +++++++++++++++++++++ tools/testing/selftests/ima/test_kexec_load.sh | 31 +-- 4 files changed, 281 insertions(+), 22 deletions(-) create mode 100755 tools/testing/selftests/ima/common_lib.sh create mode 100755 tools/testing/selftests/ima/test_kexec_file_load.sh -- 2.7.5
