Kstate changes data in kexec segments after the calculation
of the checksum, so we don't pass purgatroy verification stage.

Disable it for now. Proper solution will be later, in next versions of
the patchset.

Signed-off-by: Andrey Ryabinin <a...@yandex-team.com>
---
 arch/x86/purgatory/purgatory.c | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/arch/x86/purgatory/purgatory.c b/arch/x86/purgatory/purgatory.c
index aea47e7939637..cdec5f21282a7 100644
--- a/arch/x86/purgatory/purgatory.c
+++ b/arch/x86/purgatory/purgatory.c
@@ -45,6 +45,8 @@ void purgatory(void)
 {
        int ret;
 
+       if (IS_ENABLED(CONFIG_KSTATE))
+               return;
        ret = verify_sha256_digest();
        if (ret) {
                /* loop forever */
-- 
2.45.2


Reply via email to