CONFIG_KEXEC_VERIFY_SIG: Verify kernel signature during kexec_file_load() syscall

General informations

The Linux kernel configuration item CONFIG_KEXEC_VERIFY_SIG has multiple definitions:

Verify kernel signature during kexec_file_load() syscall found in arch/x86/Kconfig

The configuration item CONFIG_KEXEC_VERIFY_SIG:

• prompt: Verify kernel signature during kexec_file_load() syscall
• type: bool
• depends on: CONFIG_KEXEC_FILE
• defined in arch/x86/Kconfig
• found in Linux kernels: 3.17–3.19, 4.0–4.20, 5.0–5.3

Help text

This option makes kernel signature verification mandatory for the kexec_file_load() syscall.

In addition to that option, you need to enable signature verification for the corresponding kernel image type being loaded in order for this to work.

Verify kernel signature during kexec_file_load() syscall found in arch/s390/Kconfig

The configuration item CONFIG_KEXEC_VERIFY_SIG:

• prompt: Verify kernel signature during kexec_file_load() syscall
• type: bool
• depends on: CONFIG_KEXEC_FILE && CONFIG_SYSTEM_DATA_VERIFICATION
• defined in arch/s390/Kconfig
• found in Linux kernels: 5.2–5.3

Help text

This option makes kernel signature verification mandatory for the kexec_file_load() syscall.

In addition to that option, you need to enable signature verification for the corresponding kernel image type being loaded in order for this to work.

Verify kernel signature during kexec_file_load() syscall found in arch/arm64/Kconfig

The configuration item CONFIG_KEXEC_VERIFY_SIG:

• prompt: Verify kernel signature during kexec_file_load() syscall
• type: bool
• depends on: CONFIG_KEXEC_FILE
• defined in arch/arm64/Kconfig
• found in Linux kernels: 5.0–5.3

Help text

Select this option to verify a signature with loaded kernel image. If configured, any attempt of loading a image without valid signature will fail.

In addition to that option, you need to enable signature verification for the corresponding kernel image type being loaded in order for this to work.

Hardware

LKDDb

Raw data from LKDDb:

• (none)

Sources

This page is automaticly generated with free (libre, open) software lkddb(see lkddb-sources).

The data is retrived from:

• Linux kernel
• Linux Kernel Driver DataBase (LKDDb)

Automatic links from Google (and ads)

Custom Search

Popular queries: