Commit aa127a06 authored by Peter Oberparleiter's avatar Peter Oberparleiter Committed by Vasily Gorbik
Browse files

s390/boot: add secure boot trailer 



This patch enhances the kernel image adding a trailer as required for
secure boot by future firmware versions.

Cc: <stable@vger.kernel.org> # 5.2+
Signed-off-by: default avatarPeter Oberparleiter <oberpar@linux.ibm.com>
Reviewed-by: default avatarSven Schnelle <svens@linux.ibm.com>
Signed-off-by: default avatarVasily Gorbik <gor@linux.ibm.com>
parent 6ec80302

arch/s390/boot/vmlinux.lds.S

+11 −2
Original line number Diff line number Diff line
@@ -102,8 +102,17 @@ SECTIONS 
		_compressed_start = .;

		*(.vmlinux.bin.compressed)

		_compressed_end = .;

		FILL(0xff);

		. = ALIGN(4096);

	}



#define SB_TRAILER_SIZE 32

	/* Trailer needed for Secure Boot */

	. += SB_TRAILER_SIZE; /* make sure .sb.trailer does not overwrite the previous section */

	. = ALIGN(4096) - SB_TRAILER_SIZE;

	.sb.trailer : {

		QUAD(0)

		QUAD(0)

		QUAD(0)

		QUAD(0x000000207a49504c)

	}

	_end = .;