| Kconfig (58e16d792a6a8c6b750f637a4649967fcac853dc) | Kconfig (90f6f691a706754e33d2d0c6fa2e1dacedb477f6) |
|---|---|
| 1# SPDX-License-Identifier: GPL-2.0-only 2config EVM 3 bool "EVM support" 4 select KEYS 5 select ENCRYPTED_KEYS 6 select CRYPTO_HMAC 7 select CRYPTO_SHA1 8 select CRYPTO_HASH_INFO --- 50 unchanged lines hidden (view full) --- 59 bool "Load an X509 certificate onto the '.evm' trusted keyring" 60 depends on EVM && INTEGRITY_TRUSTED_KEYRING 61 default n 62 help 63 Load an X509 certificate onto the '.evm' trusted keyring. 64 65 This option enables X509 certificate loading from the kernel 66 onto the '.evm' trusted keyring. A public key can be used to | 1# SPDX-License-Identifier: GPL-2.0-only 2config EVM 3 bool "EVM support" 4 select KEYS 5 select ENCRYPTED_KEYS 6 select CRYPTO_HMAC 7 select CRYPTO_SHA1 8 select CRYPTO_HASH_INFO --- 50 unchanged lines hidden (view full) --- 59 bool "Load an X509 certificate onto the '.evm' trusted keyring" 60 depends on EVM && INTEGRITY_TRUSTED_KEYRING 61 default n 62 help 63 Load an X509 certificate onto the '.evm' trusted keyring. 64 65 This option enables X509 certificate loading from the kernel 66 onto the '.evm' trusted keyring. A public key can be used to |
| 67 verify EVM integrity starting from the 'init' process. | 67 verify EVM integrity starting from the 'init' process. The 68 key must have digitalSignature usage set. |
| 68 69config EVM_X509_PATH 70 string "EVM X509 certificate path" 71 depends on EVM_LOAD_X509 72 default "/etc/keys/x509_evm.der" 73 help 74 This option defines X509 certificate path. | 69 70config EVM_X509_PATH 71 string "EVM X509 certificate path" 72 depends on EVM_LOAD_X509 73 default "/etc/keys/x509_evm.der" 74 help 75 This option defines X509 certificate path. |