Messages in this thread | | | From | David Howells <> | Subject | Re: [PATCH 09/24] kexec_file: Disable at runtime if securelevel has been set | Date | Mon, 10 Apr 2017 14:19:52 +0100 |
| |
Mimi Zohar <zohar@linux.vnet.ibm.com> wrote:
> From an IMA perspective, either a file hash or signature are valid, > but for this usage it must be a signature.
Not necessarily. If IMA can guarantee that a module is the same based on its hash rather than on a key, I would've thought that should be fine.
David
| |