>> > diff --git a/arch/s390/Kconfig b/arch/s390/Kconfig >> > index c2c7bf974397..385c1052cf45 100644 >> > --- a/arch/s390/Kconfig >> > +++ b/arch/s390/Kconfig >> > @@ -313,7 +313,7 @@ config ARCH_SUPPORTS_KEXEC_FILE >> > def_bool y >> > >> > config ARCH_SUPPORTS_KEXEC_SIG >> > - def_bool MODULE_SIG_FORMAT >> > + def_bool y >> > >> > config ARCH_SUPPORTS_KEXEC_PURGATORY >> > def_bool y >> > diff --git a/kernel/Kconfig.kexec b/kernel/Kconfig.kexec >> > index 15632358bcf7..df97227cfca9 100644 >> > --- a/kernel/Kconfig.kexec >> > +++ b/kernel/Kconfig.kexec >> > @@ -50,6 +50,7 @@ config KEXEC_SIG >> > bool "Verify kernel signature during kexec_file_load() syscall" >> > depends on ARCH_SUPPORTS_KEXEC_SIG >> > depends on KEXEC_FILE >> > + select SYSTEM_DATA_VERIFICATION if S390 > > Alexander, would it make sense to move this to arch/s390/Kconfig and > add something like > > select SYSTEM_DATA_VERIFICATION if KEXEC_SIG > > instead? This would have the slight advantage to keep arch specifics > out of common code Kconfig.
That's even better, what i was actually looking for. And works as expected too. Thanks, Heiko.
