On 03/25/19 at 04:37pm, Mimi Zohar wrote: > On Mon, 2019-03-25 at 16:09 +0800, Dave Young wrote: > > Hi Mimi > > On 03/22/19 at 03:35pm, Mimi Zohar wrote: > > > Verify IMA is enabled before failing tests or emitting irrelevant > > > messages. Also, don't skip the test if signatures are not required. > > > > > > Suggested-by: Dave Young <dyoung@xxxxxxxxxx> > > > Signed-off-by: Mimi Zohar <zohar@xxxxxxxxxxxxx> > > > --- > > > Dave, if this patch resolves the outstanding issues, I can fold these > > > changes into the original patches. (Reminder, these patches will need to > > > be updated to support the "lockdown" patch set.) > > > > They looks good to me, thanks for the update > > I've folded the kexec_file_load changes into the kexec_file_load test. > The remaining kexec_load change is left as a separate patch, since it > is dependent on the ikconfig change. > > > Feel free to add my reviewed-by, I did some tests although not cover all > > ima cases. > > Thanks! Is this meant as a general "reviewed-by" for all of the > patches or just this specific one? Thank you for taking this as a separate kexec tests, I think it can be used for these delta fixes I read all the patches and reviewed the kexec stuff, but I do not understand all the IMA logic yet although I did some simple ima tests. Thanks Dave