| Kconfig (c95baf12f5077419db01313ab61c2aac007d40cd) | Kconfig (d19967764ba876f5c82dabaa28f983b21eb642a2) |
|---|---|
| 1# SPDX-License-Identifier: GPL-2.0-only 2# 3config INTEGRITY 4 bool "Integrity subsystem" 5 depends on SECURITY 6 default y 7 help 8 This option enables the integrity subsystem, which is comprised --- 48 unchanged lines hidden (view full) --- 57 depends on INTEGRITY_ASYMMETRIC_KEYS 58 depends on SYSTEM_BLACKLIST_KEYRING 59 help 60 Provide a separate, distinct keyring for platform trusted keys, which 61 the kernel automatically populates during initialization from values 62 provided by the platform for verifying the kexec'ed kerned image 63 and, possibly, the initramfs signature. 64 | 1# SPDX-License-Identifier: GPL-2.0-only 2# 3config INTEGRITY 4 bool "Integrity subsystem" 5 depends on SECURITY 6 default y 7 help 8 This option enables the integrity subsystem, which is comprised --- 48 unchanged lines hidden (view full) --- 57 depends on INTEGRITY_ASYMMETRIC_KEYS 58 depends on SYSTEM_BLACKLIST_KEYRING 59 help 60 Provide a separate, distinct keyring for platform trusted keys, which 61 the kernel automatically populates during initialization from values 62 provided by the platform for verifying the kexec'ed kerned image 63 and, possibly, the initramfs signature. 64 |
| 65config INTEGRITY_MACHINE_KEYRING 66 bool "Provide a keyring to which Machine Owner Keys may be added" 67 depends on SECONDARY_TRUSTED_KEYRING 68 depends on INTEGRITY_ASYMMETRIC_KEYS 69 depends on SYSTEM_BLACKLIST_KEYRING 70 depends on LOAD_UEFI_KEYS 71 depends on !IMA_KEYRINGS_PERMIT_SIGNED_BY_BUILTIN_OR_SECONDARY 72 help 73 If set, provide a keyring to which Machine Owner Keys (MOK) may 74 be added. This keyring shall contain just MOK keys. Unlike keys 75 in the platform keyring, keys contained in the .machine keyring will 76 be trusted within the kernel. 77 |
|
| 65config LOAD_UEFI_KEYS 66 depends on INTEGRITY_PLATFORM_KEYRING 67 depends on EFI 68 def_bool y 69 70config LOAD_IPL_KEYS 71 depends on INTEGRITY_PLATFORM_KEYRING 72 depends on S390 --- 30 unchanged lines hidden --- | 78config LOAD_UEFI_KEYS 79 depends on INTEGRITY_PLATFORM_KEYRING 80 depends on EFI 81 def_bool y 82 83config LOAD_IPL_KEYS 84 depends on INTEGRITY_PLATFORM_KEYRING 85 depends on S390 --- 30 unchanged lines hidden --- |