Djam/kernel-5.10
1
0
Fork 0
mirror of https://abf.rosa.ru/djam/kernel-5.10.git synced 2025-02-25 01:32:48 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

allow to read IMA policy at runtime, keep loading x509 by kernel offed and keep changing IMA policy after initial load offed (initrd or systemd load the policy)

Browse source
This commit is contained in:
Mikhail Novosyolov 2020-11-05 14:45:09 +03:00
parent cb3433c5ce
commit 14cd264aa2
3 changed files with 7 additions and 7 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

6
kernel-i586.config
View file

@ -2936,14 +2936,14 @@ CONFIG_IMA_DEFAULT_HASH_SHA1=y
# CONFIG_IMA_DEFAULT_HASH_SHA512 is not set
CONFIG_IMA_DEFAULT_TEMPLATE="ima-ng"
# CONFIG_IMA_KEYRINGS_PERMIT_SIGNED_BY_BUILTIN_OR_SECONDARY is not set
# CONFIG_IMA_LOAD_X509 is not set
CONFIG_IMA_LOAD_X509=n
CONFIG_IMA_LSM_RULES=y
CONFIG_IMA_MEASURE_PCR_IDX=10
CONFIG_IMA_NG_TEMPLATE=y
# CONFIG_IMA_READ_POLICY is not set
CONFIG_IMA_READ_POLICY=y
# CONFIG_IMA_SIG_TEMPLATE is not set
# CONFIG_IMA_TEMPLATE is not set
# CONFIG_IMA_WRITE_POLICY is not set
CONFIG_IMA_WRITE_POLICY=n
CONFIG_IMA=y
CONFIG_IMG_ASCII_LCD=m
CONFIG_INA2XX_ADC=m

6
kernel-x86_64.config
View file

@ -2959,15 +2959,15 @@ CONFIG_IMA_DEFAULT_HASH_SHA1=y
# CONFIG_IMA_DEFAULT_HASH_SHA512 is not set
CONFIG_IMA_DEFAULT_TEMPLATE="ima-ng"
# CONFIG_IMA_KEYRINGS_PERMIT_SIGNED_BY_BUILTIN_OR_SECONDARY is not set
# CONFIG_IMA_LOAD_X509 is not set
CONFIG_IMA_LOAD_X509=n
CONFIG_IMA_LSM_RULES=y
CONFIG_IMA_MEASURE_PCR_IDX=10
CONFIG_IMA_NG_TEMPLATE=y
# CONFIG_IMA_READ_POLICY is not set
CONFIG_IMA_READ_POLICY=y
# CONFIG_IMA_SIG_TEMPLATE is not set
# CONFIG_IMA_TEMPLATE is not set
CONFIG_IMA_TRUSTED_KEYRING=y
# CONFIG_IMA_WRITE_POLICY is not set
CONFIG_IMA_WRITE_POLICY=n
CONFIG_IMA=y
CONFIG_IMG_ASCII_LCD=m
CONFIG_INA2XX_ADC=m

2
kernel.spec
View file

@ -24,7 +24,7 @@
%define sublevel 72
# Release number. Increase this before a rebuild.
%define rpmrel 2
%define rpmrel 3
%define fullrpmrel %{rpmrel}
%define rpmtag %{disttag}