From: Fedora Kernel Team <kernel-t...@fedoraproject.org>
[redhat] New configs in security/integrity
Hi,
As part of the ongoing rebase effort, the following configuration
options need to be reviewed.
As a reminder, the ARK configuration flow involves moving unreviewed
configuration options from the pending directory to the ark directory.
In the diff below, options are removed from the pending directory and
added to the ark hierarchy. The final options that need to be ACKed
are the files that are being added to the ark hierarchy.
If the value for a file that is added should be changed, please reply
with a better option.
Symbol: IMA_KEXEC_EXTRA_MEMORY_KB [=0]
Type : integer
Range : [0 40]
Defined at security/integrity/ima/Kconfig:324
Prompt: Extra memory for IMA measurements added during kexec soft reboot
Depends on: INTEGRITY [=y] && IMA [=y] && IMA_KEXEC [=y]
Location:
-> Security options
-> Integrity subsystem (INTEGRITY [=y])
-> Integrity Measurement Architecture(IMA) (IMA [=y])
-> Extra memory for IMA measurements added during kexec soft reboot
(IMA_KEXEC_EXTRA_MEMORY_KB [=0])
Commit: 0ad93987c9c1 (ima: make the kexec extra memory configurable)
---
Signed-off-by: Fedora Kernel Team <kernel-t...@fedoraproject.org>
diff --git
a/redhat/configs/pending-rhel/generic/CONFIG_IMA_KEXEC_EXTRA_MEMORY_KB
b/redhat/configs/pending-rhel/generic/CONFIG_IMA_KEXEC_EXTRA_MEMORY_KB
deleted file mode 100644
index blahblah..blahblah 0
--- a/redhat/configs/pending-rhel/generic/CONFIG_IMA_KEXEC_EXTRA_MEMORY_KB
+++ /dev/null
@@ -1,16 +0,0 @@
-# Symbol: IMA_KEXEC_EXTRA_MEMORY_KB [=0]
-# Type : integer
-# Range : [0 40]
-# Defined at security/integrity/ima/Kconfig:324
-# Prompt: Extra memory for IMA measurements added during kexec soft reboot
-# Depends on: INTEGRITY [=y] && IMA [=y] && IMA_KEXEC [=y]
-# Location:
-# -> Security options
-# -> Integrity subsystem (INTEGRITY [=y])
-# -> Integrity Measurement Architecture(IMA) (IMA [=y])
-# -> Extra memory for IMA measurements added during kexec soft
reboot (IMA_KEXEC_EXTRA_MEMORY_KB [=0])
-#
-#
-#
-# Commit: 0ad93987c9c1 (ima: make the kexec extra memory configurable)
-CONFIG_IMA_KEXEC_EXTRA_MEMORY_KB=0
diff --git a/redhat/configs/rhel/generic/CONFIG_IMA_KEXEC_EXTRA_MEMORY_KB
b/redhat/configs/rhel/generic/CONFIG_IMA_KEXEC_EXTRA_MEMORY_KB
new file mode 100644
index blahblah..blahblah 100644
--- /dev/null
+++ b/redhat/configs/rhel/generic/CONFIG_IMA_KEXEC_EXTRA_MEMORY_KB
@@ -0,0 +1 @@
+CONFIG_IMA_KEXEC_EXTRA_MEMORY_KB=0
--
https://gitlab.com/cki-project/kernel-ark/-/merge_requests/3909
--
_______________________________________________
kernel mailing list -- kernel@lists.fedoraproject.org
To unsubscribe send an email to kernel-le...@lists.fedoraproject.org
Fedora Code of Conduct:
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedoraproject.org/archives/list/kernel@lists.fedoraproject.org
Do not reply to spam, report it:
https://pagure.io/fedora-infrastructure/new_issue
