linux/security/integrity/efi_secureboot.c, branch masterMirror of https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/
https://git.shady.money/linux/atom?h=master2026-03-05T16:10:08Zintegrity: Make arch_ima_get_secureboot integrity-wide2026-03-05T16:10:08ZCoiby Xucoxu@redhat.com2026-02-13T01:28:46Zurn:sha1:31a6a07eefeb4c84bd6730fbe9e95fd9221712cf
EVM and other LSMs need the ability to query the secure boot status of
the system, without directly calling the IMA arch_ima_get_secureboot
function. Refactor the secure boot status check into a general function
named arch_get_secureboot.
Reported-and-suggested-by: Mimi Zohar <zohar@linux.ibm.com>
Suggested-by: Roberto Sassu <roberto.sassu@huawei.com>
Signed-off-by: Coiby Xu <coxu@redhat.com>
Acked-by: Ard Biesheuvel <ardb@kernel.org>
Signed-off-by: Mimi Zohar <zohar@linux.ibm.com>