s390/boot: add secure boot trailer

This patch enhances the kernel image adding a trailer as required for secure boot by future firmware versions. Cc: <[email protected]> # 5.2+ Signed-off-by: Peter Oberparleiter <[email protected]> Reviewed-by: Sven Schnelle <[email protected]> Signed-off-by: Vasily Gorbik <[email protected]>
torvalds · Oct 26, 2022 · aa127a0 · aa127a0
1 parent 6ec8030
commit aa127a0
Showing 1 changed file with 11 additions and 2 deletions.
diff --git a/arch/s390/boot/vmlinux.lds.S b/arch/s390/boot/vmlinux.lds.S
@@ -102,8 +102,17 @@ SECTIONS
  _compressed_start = .;
  *(.vmlinux.bin.compressed)
  _compressed_end = .;
- FILL(0xff);
- . = ALIGN(4096);
+ }
+
+#define SB_TRAILER_SIZE 32
+ /* Trailer needed for Secure Boot */
+ . += SB_TRAILER_SIZE; /* make sure .sb.trailer does not overwrite the previous section */
+ . = ALIGN(4096) - SB_TRAILER_SIZE;
+ .sb.trailer : {
+ QUAD(0)
+ QUAD(0)
+ QUAD(0)
+ QUAD(0x000000207a49504c)
  }
  _end = .;