]> git.ipfire.org Git - thirdparty/kernel/linux.git/commit
s390: Drop unnecessary CONFIG_IMA_SECURE_AND_OR_TRUSTED_BOOT
authorCoiby Xu <coxu@redhat.com>
Fri, 13 Feb 2026 01:28:48 +0000 (09:28 +0800)
committerMimi Zohar <zohar@linux.ibm.com>
Thu, 5 Mar 2026 16:15:10 +0000 (11:15 -0500)
commita2e507afd9a25e333b7a58082f5db8c4de2bd12d
tree8796005d59758b01fb66b4284ba0b9a0677c363b
parentcf75c8632034da568146f4005db746d4a3998292
s390: Drop unnecessary CONFIG_IMA_SECURE_AND_OR_TRUSTED_BOOT

Commit b5ca117365d9 ("ima: prevent kexec_load syscall based on runtime
secureboot flag") and commit 268a78404973 ("s390/kexec_file: Disable
kexec_load when IPLed secure") disabled the kexec_load syscall based
on the secureboot mode. Commit 9e2b4be377f0 ("ima: add a new CONFIG
for loading arch-specific policies") needed to detect the secure boot
mode, not to load an IMA architecture specific policy. Since there is
the new CONFIG_INTEGRITY_SECURE_BOOT, drop
CONFIG_IMA_SECURE_AND_OR_TRUSTED_BOOT for s390.

Signed-off-by: Coiby Xu <coxu@redhat.com>
Tested-by: Alexander Egorenkov <egorenar@linux.ibm.com>
[Vasily Gorbik: Fix missing arch_get_secureboot() prototype warning]
link: https://lore.kernel.org/linux-integrity/c00-01.ttbfdx5@ub.hpns/
Signed-off-by: Mimi Zohar <zohar@linux.ibm.com>
arch/s390/Kconfig
arch/s390/kernel/Makefile
arch/s390/kernel/ima_arch.c [deleted file]
arch/s390/kernel/ipl.c