ima: add a knob ima= to allow disabling IMA in kdump kernel
authorBaoquan He <bhe@redhat.com>
Sat, 14 Jun 2025 02:23:42 +0000 (10:23 +0800)
committerMimi Zohar <zohar@linux.ibm.com>
Mon, 16 Jun 2025 13:15:13 +0000 (09:15 -0400)
commitaa9bb1b32594cd67cafd29b330b158128b503882
treeadf2925335e7168cc7326fb429bd94ce3b612d90
parente04c78d86a9699d136910cfc0bdcf01087e3267e
ima: add a knob ima= to allow disabling IMA in kdump kernel

Kdump kernel doesn't need IMA functionality, and enabling IMA will cost
extra memory. It would be very helpful to allow IMA to be disabled for
kdump kernel.

Hence add a knob ima=on|off here to allow turning IMA off in kdump
kernel if needed.

Note that this IMA disabling is limited to kdump kernel, please don't
abuse it in other kernel and thus serious consequences are caused.

Signed-off-by: Baoquan He <bhe@redhat.com>
Signed-off-by: Mimi Zohar <zohar@linux.ibm.com>
Documentation/admin-guide/kernel-parameters.txt
security/integrity/ima/ima_main.c