Re: [PATCH v5 0/3] use more system keyrings to verify arm64 kdump kernel image signature

2022-04-13 Thread Coiby Xu
On Mon, Apr 11, 2022 at 10:43:06AM +0200, Michal Suchánek wrote: On Mon, Apr 11, 2022 at 09:52:18AM +0800, Coiby Xu wrote: On Mon, Apr 11, 2022 at 09:13:32AM +0800, Baoquan He wrote: > On 04/08/22 at 10:59am, Michal Suchánek wrote: > > On Fri, Apr 08, 2022 at 03:17:19PM +0800, Baoquan He wrote:

Re: [PATCH v5 0/3] use more system keyrings to verify arm64 kdump kernel image signature

2022-04-11 Thread Michal Suchánek
On Mon, Apr 11, 2022 at 09:52:18AM +0800, Coiby Xu wrote: > On Mon, Apr 11, 2022 at 09:13:32AM +0800, Baoquan He wrote: > > On 04/08/22 at 10:59am, Michal Suchánek wrote: > > > On Fri, Apr 08, 2022 at 03:17:19PM +0800, Baoquan He wrote: > > > > Hi Coiby, > > > > > > > > On 04/01/22 at 09:31am,

Re: [PATCH v5 0/3] use more system keyrings to verify arm64 kdump kernel image signature

2022-04-10 Thread Coiby Xu
On Mon, Apr 11, 2022 at 09:13:32AM +0800, Baoquan He wrote: On 04/08/22 at 10:59am, Michal Suchánek wrote: On Fri, Apr 08, 2022 at 03:17:19PM +0800, Baoquan He wrote: > Hi Coiby, > > On 04/01/22 at 09:31am, Coiby Xu wrote: > > Currently, a problem faced by arm64 is if a kernel image is signed

Re: [PATCH v5 0/3] use more system keyrings to verify arm64 kdump kernel image signature

2022-04-10 Thread Baoquan He
On 04/08/22 at 10:59am, Michal Suchánek wrote: > On Fri, Apr 08, 2022 at 03:17:19PM +0800, Baoquan He wrote: > > Hi Coiby, > > > > On 04/01/22 at 09:31am, Coiby Xu wrote: > > > Currently, a problem faced by arm64 is if a kernel image is signed by a > > > MOK key, loading it via the

Re: [PATCH v5 0/3] use more system keyrings to verify arm64 kdump kernel image signature

2022-04-08 Thread Michal Suchánek
On Fri, Apr 08, 2022 at 03:17:19PM +0800, Baoquan He wrote: > Hi Coiby, > > On 04/01/22 at 09:31am, Coiby Xu wrote: > > Currently, a problem faced by arm64 is if a kernel image is signed by a > > MOK key, loading it via the kexec_file_load() system call would be > > rejected with the error

[PATCH v5 0/3] use more system keyrings to verify arm64 kdump kernel image signature

2022-03-31 Thread Coiby Xu
Currently, a problem faced by arm64 is if a kernel image is signed by a MOK key, loading it via the kexec_file_load() system call would be rejected with the error "Lockdown: kexec: kexec of unsigned images is restricted; see man kernel_lockdown.7". This patch set allows arm64 to use more system