On Thu, Jun 26, 2014 at 01:58:11PM -0700, Andrew Morton wrote: > Well, this is an absolute ton of new code, much of it pretty complex. > And I believe the entire point of this work is to enable image > signature checking, but that hasn't been implemented yet? > > In which case I'm thinking it would be unwise to merge these parts > into mainline - if signature checking doesn't work or fails review or > if you get hit by a bus then we'd be left with a large lump of rather > useless code? > > In which case I'm inclined to put this series into -next and keep it > there pending completion of the signature checking part. Before we rush these in, it'd be nice if someone more experienced would take a look at the general approach of the whole handling with the purgatory and such. I certainly tried to give my best while reviewing but I'm too inexperienced in kexec and the whole booting of another kernel and all the intricacies of the process. It'll be optimal if Eric Biederman would find some free time for those. AFAIK, hpa wanted to take a look too so can we please slow down a bit here first? Thanks. -- Regards/Gruss, Boris. Sent from a fat crate under my desk. Formatting is fine. --