mirror of
https://github.com/ibm-s390-linux/s390-tools.git
synced 2026-08-05 02:14:52 +00:00
73ab25f419
With SECURE_BOOT_DISABLED always set in add_dump_program() no signature entries for a dump kernel are written. This might lead to security violation error from the IPL Loader on the systems with secure boot support on the attempt to boot the dump kernel: MLOLOA6269321F A security violation error was encountered when loading from device <device> MLOLOA62693212 Audit: No signed components found for program 0 loaded from device <device> Propagate '--secure' zipl option to add_dump_program() in order to sign relevant components upon dump program installation and thus support secure boot execution for List-directed dump kernels. Signed-off-by: Mikhail Zaslonko <zaslonko@linux.ibm.com> Acked-by: Eduard Shishkin <edward6@linux.ibm.com> Reviewed-by: Stefan Haberland <sth@linux.ibm.com> Reviewed-by: Alexander Egorenkov <egorenar@linux.ibm.com> Tested-by: Alexander Egorenkov <egorenar@linux.ibm.com> Signed-off-by: Jan Höppner <hoeppner@linux.ibm.com>