Djam/kernel-5.15
1
0
Fork 0
mirror of https://abf.rosa.ru/djam/kernel-5.15.git synced 2025-02-23 10:32:54 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

Enable some IMA integrity parts, configs of x86_64 and i586 were different

Browse source
This commit is contained in:
Mikhail Novosyolov 2020-11-05 02:42:36 +03:00
parent 2f7f43e330
commit cb3433c5ce
3 changed files with 19 additions and 8 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

14
kernel-i586.config
View file

@ -3079,12 +3079,16 @@ CONFIG_INPUT_YEALINK=m
CONFIG_INSTRUCTION_DECODER=y
CONFIG_INT3406_THERMAL=m
CONFIG_INT340X_THERMAL=m
CONFIG_INTEGRITY_ASYMMETRIC_KEYS=y
CONFIG_INTEGRITY_AUDIT=y
CONFIG_INTEGRITY_PLATFORM_KEYRING=y
CONFIG_INTEGRITY_SIGNATURE=y
CONFIG_INTEGRITY_TRUSTED_KEYRING=y
CONFIG_INTEGRITY=y
CONFIG_INTEGRITY_AUDIT=y
CONFIG_INTEGRITY_SIGNATURE=y
CONFIG_INTEGRITY_ASYMMETRIC_KEYS=y
# For now allow to add any public keys, not only the ones signed
# by a CA known to the kernel (ROSA CA)
# https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=850339#20
# TODO: =y?
CONFIG_INTEGRITY_TRUSTED_KEYRING=n
CONFIG_INTEGRITY_PLATFORM_KEYRING=y
CONFIG_INTEL_ATOMISP2_PM=m
CONFIG_INTEL_BXT_PMIC_THERMAL=m
CONFIG_INTEL_BXTWC_PMIC_TMU=m

11
kernel-x86_64.config
View file

@ -3110,9 +3110,16 @@ CONFIG_INPUT_YEALINK=m
CONFIG_INSTRUCTION_DECODER=y
CONFIG_INT3406_THERMAL=m
CONFIG_INT340X_THERMAL=m
CONFIG_INTEGRITY_AUDIT=y
# CONFIG_INTEGRITY_SIGNATURE is not set
CONFIG_INTEGRITY=y
CONFIG_INTEGRITY_AUDIT=y
CONFIG_INTEGRITY_SIGNATURE=y
CONFIG_INTEGRITY_ASYMMETRIC_KEYS=y
# For now allow to add any public keys, not only the ones signed
# by a CA known to the kernel (ROSA CA)
# https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=850339#20
# TODO: =y?
CONFIG_INTEGRITY_TRUSTED_KEYRING=n
CONFIG_INTEGRITY_PLATFORM_KEYRING=y
CONFIG_INTEL_ATOMISP2_PM=m
CONFIG_INTEL_BXT_PMIC_THERMAL=m
CONFIG_INTEL_BXTWC_PMIC_TMU=m

2
kernel.spec
View file

@ -24,7 +24,7 @@
%define sublevel 72
# Release number. Increase this before a rebuild.
%define rpmrel 1
%define rpmrel 2
%define fullrpmrel %{rpmrel}
%define rpmtag %{disttag}