CONFIG_IMA_APPRAISE_REQUIRE_KEXEC_SIGS: Appraise kexec kernel image signatures

General informations

The Linux kernel configuration item CONFIG_IMA_APPRAISE_REQUIRE_KEXEC_SIGS:

• prompt: Appraise kexec kernel image signatures
• type: bool
• depends on: CONFIG_IMA_APPRAISE_BUILD_POLICY
• defined in security/integrity/ima/Kconfig
• found in Linux kernels: 4.19–4.20, 5.0–5.19, 6.0–6.12, 6.13-rc+HEAD

Help text

Enabling this rule will require all kexec'ed kernel images to be signed and verified by a public key on the trusted IMA keyring.

Kernel image signatures can not be verified by the original kexec_load syscall. Enabling this rule will prevent its usage.

Hardware

LKDDb

Raw data from LKDDb:

• (none)

Sources

This page is automaticly generated with free (libre, open) software lkddb(see lkddb-sources).

The data is retrived from:

• Linux kernel
• Linux Kernel Driver DataBase (LKDDb)

Automatic links from Google (and ads)

Custom Search

Popular queries: