Re: [OS-BUILD PATCH 0/2] redhat/configs: fix missing IMA config options
From: Mark Salter on gitlab.com https://gitlab.com/cki-project/kernel-ark/-/merge_requests/1166#note_598580261 Acked-by: Mark Salter (via approve button) ___ kernel mailing list -- kernel@lists.fedoraproject.org To unsubscribe send an email to kernel-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/kernel@lists.fedoraproject.org Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
Re: [OS-BUILD PATCH 0/2] redhat/configs: fix missing IMA config options
From: Jerry Snitselaar on gitlab.com https://gitlab.com/cki-project/kernel-ark/-/merge_requests/1166#note_598401900 Acked-by: Jerry Snitselaar (via approve button) ___ kernel mailing list -- kernel@lists.fedoraproject.org To unsubscribe send an email to kernel-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/kernel@lists.fedoraproject.org Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
Re: [OS-BUILD PATCH 0/2] redhat/configs: fix missing IMA config options
From: Bruno Meneguele on gitlab.com https://gitlab.com/cki-project/kernel-ark/-/merge_requests/1166#note_593175556 cc @msalter: CONFIG_IMA_KEXEC isn't enabled in RHEL-8 for aarch64, but should be safe to be enabled in ARK. ___ kernel mailing list -- kernel@lists.fedoraproject.org To unsubscribe send an email to kernel-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/kernel@lists.fedoraproject.org Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
[OS-BUILD PATCH 0/2] redhat/configs: fix missing IMA config options
From: Bruno Meneguele on gitlab.com
Merge Request: https://gitlab.com/cki-project/kernel-ark/-/merge_requests/1166
The config options being enable here are some that I missed in previous MRs
that I opened re-working the IMA overall state across all ARK supported
arches.
All options were already enabled in one or more arches in RHEL-8, so
enabling it in ARK are safe.
Signed-off-by: Bruno Meneguele
c30e184b2b98 (Bruno Meneguele)
redhat/configs: enable IMA_KEXEC for supported arches
aab410e1a8dc (Bruno Meneguele)
redhat/configs: enable INTEGRITY_SIGNATURE to all arches
redhat/configs/ark/generic/CONFIG_IMA_KEXEC | 1
-
redhat/configs/ark/generic/CONFIG_INTEGRITY_SIGNATURE| 1
-
redhat/configs/ark/generic/x86/x86_64/CONFIG_IMA_APPRAISE_BUILD_POLICY | 1
-
redhat/configs/ark/generic/x86/x86_64/CONFIG_INTEGRITY_SIGNATURE | 1
-
.../generic/powerpc => common/generic}/CONFIG_IMA_APPRAISE_BUILD_POLICY | 0
redhat/configs/{fedora => common}/generic/CONFIG_IMA_KEXEC | 0
.../{ark/generic/powerpc => common/generic}/CONFIG_INTEGRITY_SIGNATURE | 0
redhat/configs/fedora/generic/CONFIG_IMA_APPRAISE_BUILD_POLICY | 1
-
redhat/configs/fedora/generic/CONFIG_INTEGRITY_SIGNATURE | 1
-
9 files changed, 6 deletions(-)
___
kernel mailing list -- kernel@lists.fedoraproject.org
To unsubscribe send an email to kernel-le...@lists.fedoraproject.org
Fedora Code of Conduct:
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedoraproject.org/archives/list/kernel@lists.fedoraproject.org
Do not reply to spam on the list, report it:
https://pagure.io/fedora-infrastructure
