1#!/bin/sh 2# SPDX-License-Identifier: GPL-2.0 3# Loading a kernel image via the kexec_load syscall should fail 4# when the kernel is CONFIG_KEXEC_VERIFY_SIG enabled and the system 5# is booted in secureboot mode. 6 7TEST="$0" 8. ./kexec_common_lib.sh 9 10# kexec requires root privileges 11require_root_privileges 12 13get_secureboot_mode 14secureboot=$? 15 16# kexec_load should fail in secure boot mode 17KERNEL_IMAGE="/boot/vmlinuz-`uname -r`" 18kexec --load $KERNEL_IMAGE > /dev/null 2>&1 19if [ $? -eq 0 ]; then 20 kexec --unload 21 if [ $secureboot -eq 1 ]; then 22 log_fail "kexec_load succeeded" 23 else 24 log_pass "kexec_load succeeded" 25 fi 26else 27 if [ $secureboot -eq 1 ]; then 28 log_pass "kexec_load failed" 29 else 30 log_fail "kexec_load failed" 31 fi 32fi 33