| Kconfig (9a64e8e0ace51b309fdcff4b4754b3649250382a) | Kconfig (417c6c8ee2eb6975f357d8975af94ba5fbeaf82d) |
|---|---|
| 1# IBM Integrity Measurement Architecture 2# 3config IMA 4 bool "Integrity Measurement Architecture(IMA)" 5 depends on SECURITY 6 select INTEGRITY 7 select SECURITYFS 8 select CRYPTO --- 24 unchanged lines hidden (view full) --- 33 range 8 14 34 default 10 35 help 36 IMA_MEASURE_PCR_IDX determines the TPM PCR register index 37 that IMA uses to maintain the integrity aggregate of the 38 measurement list. If unsure, use the default 10. 39 40config IMA_AUDIT | 1# IBM Integrity Measurement Architecture 2# 3config IMA 4 bool "Integrity Measurement Architecture(IMA)" 5 depends on SECURITY 6 select INTEGRITY 7 select SECURITYFS 8 select CRYPTO --- 24 unchanged lines hidden (view full) --- 33 range 8 14 34 default 10 35 help 36 IMA_MEASURE_PCR_IDX determines the TPM PCR register index 37 that IMA uses to maintain the integrity aggregate of the 38 measurement list. If unsure, use the default 10. 39 40config IMA_AUDIT |
| 41 bool | 41 bool "Enables auditing support" |
| 42 depends on IMA | 42 depends on IMA |
| 43 depends on AUDIT |
|
| 43 default y 44 help 45 This option adds a kernel parameter 'ima_audit', which 46 allows informational auditing messages to be enabled 47 at boot. If this option is selected, informational integrity 48 auditing messages can be enabled with 'ima_audit=1' on 49 the kernel command line. 50 51config IMA_LSM_RULES 52 bool 53 depends on IMA && AUDIT && (SECURITY_SELINUX || SECURITY_SMACK) 54 default y 55 help 56 Disabling this option will disregard LSM based policy rules. | 44 default y 45 help 46 This option adds a kernel parameter 'ima_audit', which 47 allows informational auditing messages to be enabled 48 at boot. If this option is selected, informational integrity 49 auditing messages can be enabled with 'ima_audit=1' on 50 the kernel command line. 51 52config IMA_LSM_RULES 53 bool 54 depends on IMA && AUDIT && (SECURITY_SELINUX || SECURITY_SMACK) 55 default y 56 help 57 Disabling this option will disregard LSM based policy rules. |