blob: 02381aa49d365dcb90a319dc4a341d7fe6bcb34f (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
|
# Enable bare minimum IMA measurement and appraisal as needed by this layer.
CONFIG_SECURITY=y
CONFIG_INTEGRITY=y
# measurement
CONFIG_IMA=y
# appraisal
CONFIG_IMA_APPRAISE=y
CONFIG_INTEGRITY_SIGNATURE=y
CONFIG_INTEGRITY_ASYMMETRIC_KEYS=y
# Kernel will get built with embedded X.509 root CA key and all keys
# need to be signed with that.
CONFIG_IMA_TRUSTED_KEYRING=y
|
