ima: silence measurement list hexdump during kexec
authorBruno Meneguele <bmeneg@redhat.com>
Wed, 29 Dec 2021 02:03:03 +0000 (23:03 -0300)
committerMimi Zohar <zohar@linux.ibm.com>
Wed, 5 Jan 2022 11:22:00 +0000 (06:22 -0500)
commit520451e90cbe9da018a045825626afb354b3465c
treeb59f077d01ac3bc40c697af0c4453d0f80942d31
parent9be6dc8059bb235ffb0666690a26c0df15cc6d9e
ima: silence measurement list hexdump during kexec

Directly calling print_hex_dump() dumps the IMA measurement list on soft
resets (kexec) straight to the syslog (kmsg/dmesg) without considering the
DEBUG flag or the dynamic debug state, causing the output to be always
printed, including during boot time.

Since this output is only valid for IMA debugging, but not necessary on
normal kexec operation, print_hex_dump_debug() adheres to the pr_debug()
behavior: the dump is only printed to syslog when DEBUG is defined or when
explicitly requested by the user through dynamic debugging.

Signed-off-by: Bruno Meneguele <bmeneg@redhat.com>
Signed-off-by: Mimi Zohar <zohar@linux.ibm.com>
security/integrity/ima/ima_kexec.c