diff options
| author | Josh Boyer <jwboyer@redhat.com> | 2012-03-06 16:09:57 -0500 |
|---|---|---|
| committer | Josh Boyer <jwboyer@redhat.com> | 2012-03-07 15:07:26 -0500 |
| commit | c2a12cd16fff536ed98eb457a85b3a0842b4f825 (patch) | |
| tree | 398dfcafb0c679693ab2759f961109f079a93187 /config-generic | |
| parent | 8247ca06d49598742ec4a0d39b9600e71d410f1e (diff) | |
| download | kernel-c2a12cd16fff536ed98eb457a85b3a0842b4f825.tar.gz kernel-c2a12cd16fff536ed98eb457a85b3a0842b4f825.tar.xz kernel-c2a12cd16fff536ed98eb457a85b3a0842b4f825.zip | |
Add kernel module signing on x86
Leave enforcing disabled for now, so unsigned modules can still load. This
can be switched by adding "enforcemodulesig=1" to the kernel command line.
Diffstat (limited to 'config-generic')
| -rw-r--r-- | config-generic | 7 |
1 files changed, 6 insertions, 1 deletions
diff --git a/config-generic b/config-generic index a68f37f68..d63c834f7 100644 --- a/config-generic +++ b/config-generic @@ -3842,7 +3842,7 @@ CONFIG_CRYPTO_SEED=m CONFIG_CRYPTO_SEQIV=m CONFIG_CRYPTO_SERPENT=m CONFIG_CRYPTO_SHA1=y -CONFIG_CRYPTO_SHA256=m +CONFIG_CRYPTO_SHA256=y CONFIG_CRYPTO_SHA512=m CONFIG_CRYPTO_TEA=m CONFIG_CRYPTO_TGR192=m @@ -4392,3 +4392,8 @@ CONFIG_INTEL_MID_PTI=m CONFIG_IOMMU_SUPPORT=y # CONFIG_PM_DEVFREQ is not set +# CONFIG_MODULE_SIG is not set +# CONFIG_MODULE_VERIFY_ELF is not set +# CONFIG_CRYPTO_KEY_TYPE is not set +# CONFIG_PGP_LIBRARY is not set +# CONFIG_PGP_PRELOAD is not set |