From: Bruno Meneguele on gitlab.com
https://gitlab.com/cki-project/kernel-ark/-/merge_requests/1166#note_593175556
cc @msalter:
CONFIG_IMA_KEXEC isn't enabled in RHEL-8 for aarch64, but should be safe to be
enabled in ARK.
___
kernel mailing list --
From: Bruno Meneguele
redhat/configs: enable INTEGRITY_SIGNATURE to all arches
CONFIG_INTEGRITY_SIGNATURE has been enabled for all supported arches in
RHEL-8 and also in Fedora, but I missed it in ARK and, consequently, s390x
missed the CONFIG_IMA_APPRAISE_MODSIG option, which should be set.
From: Bruno Meneguele
redhat/configs: enable IMA_KEXEC for supported arches
In RHEL-8, powerpc has support for IMA_KEXEC, and today, only ppc and
aarch64 supports IMA_KEXEC, which are backed by the HAVE_IMA_KEXEC option.
With that, lets enable it in ARK and also, since the HAVE_* option it's
From: Bruno Meneguele on gitlab.com
Merge Request: https://gitlab.com/cki-project/kernel-ark/-/merge_requests/1166
The config options being enable here are some that I missed in previous MRs
that I opened re-working the IMA overall state across all ARK supported
arches.
All options were already
From: Prarit Bhargava on gitlab.com
https://gitlab.com/cki-project/kernel-ark/-/merge_requests/1159#note_593168390
Acked-by: Prarit Bhargava
(via approve button)
___
kernel mailing list -- kernel@lists.fedoraproject.org
To unsubscribe send an email to
