ima: define and call ima_alloc_kexec_file_buf()

In the current implementation, the ima_dump_measurement_list() API is
called during the kexec "load" phase, where a buffer is allocated and
the measurement records are copied. Due to this, new events added after
kexec load but before kexec execute are not carried over to the new kernel
during kexec operation

Carrying the IMA measurement list across kexec requires allocating a
buffer and copying the measurement records.  Separate allocating the
buffer and copying the measurement records into separate functions in
order to allocate the buffer at kexec 'load' and copy the measurements
at kexec 'execute'.

After moving the vfree() here at this stage in the patch set, the IMA
measurement list fails to verify when doing two consecutive "kexec -s -l"
with/without a "kexec -s -u" in between.  Only after "ima: kexec: move
IMA log copy from kexec load to execute" the IMA measurement list verifies
properly with the vfree() here.

Co-developed-by: Tushar Sugandhi <[email protected]>
Signed-off-by: Tushar Sugandhi <[email protected]>
Signed-off-by: Steven Chen <[email protected]>
Reviewed-by: Stefan Berger <[email protected]>
Acked-by: Baoquan He <[email protected]>
Tested-by: Stefan Berger <[email protected]> # ppc64/kvm
Signed-off-by: Mimi Zohar <[email protected]>

0 files changed, 0 insertions, 0 deletions