wireguard-linux/arch/s390/kernel/ima_arch.c, branch jd/unified-crypt-queue WireGuard for the Linux kernel https://git.zx2c4.com/wireguard-linux/atom/arch/s390/kernel/ima_arch.c?h=jd%2Funified-crypt-queue 2019-04-29T08:44:03Z s390/kexec_file: Disable kexec_load when IPLed secure 2019-04-29T08:44:03Z Philipp Rudo prudo@linux.ibm.com 2019-03-26T14:45:53Z urn:sha1:268a78404973594d1a7ec3a2b6a2474e0543a435 A kernel loaded via kexec_load cannot be verified. Thus disable kexec_load systemcall in kernels which where IPLed securely. Use the IMA mechanism to do so. Signed-off-by: Philipp Rudo <prudo@linux.ibm.com> Signed-off-by: Martin Schwidefsky <schwidefsky@de.ibm.com>