diff options
| author | Josh Boyer <jwboyer@redhat.com> | 2013-08-30 11:32:36 -0400 |
|---|---|---|
| committer | Josh Boyer <jwboyer@redhat.com> | 2013-08-30 11:32:55 -0400 |
| commit | c9d9c5a37e289235f8897d43c5c4f1dcfc5e7a90 (patch) | |
| tree | e2dc3f3af01ec47895411bd40d3e59f8b869496e /config-x86-generic | |
| parent | 6db14169b396af2e6f3dd567ce536cd869614e58 (diff) | |
| download | kernel-c9d9c5a37e289235f8897d43c5c4f1dcfc5e7a90.tar.gz kernel-c9d9c5a37e289235f8897d43c5c4f1dcfc5e7a90.tar.xz kernel-c9d9c5a37e289235f8897d43c5c4f1dcfc5e7a90.zip | |
Rework Secure Boot support to use the secure_modules approach
- Drop pekey
Diffstat (limited to 'config-x86-generic')
| -rw-r--r-- | config-x86-generic | 6 |
1 files changed, 3 insertions, 3 deletions
diff --git a/config-x86-generic b/config-x86-generic index f2a071e3f..64f5a2fc8 100644 --- a/config-x86-generic +++ b/config-x86-generic @@ -441,14 +441,14 @@ CONFIG_VMWARE_VMCI_VSOCKETS=m CONFIG_XZ_DEC_X86=y CONFIG_MPILIB=y -CONFIG_PKCS7_MESSAGE_PARSER=y -CONFIG_PE_FILE_PARSER=y CONFIG_MODULE_SIG=y CONFIG_MODULE_SIG_ALL=y # CONFIG_MODULE_SIG_SHA1 is not set CONFIG_MODULE_SIG_SHA256=y # CONFIG_MODULE_SIG_FORCE is not set -CONFIG_SYSTEM_BLACKLIST_KEYRING=y +CONFIG_MODULE_SIG_BLACKLIST=y +CONFIG_EFI_SECURE_BOOT_SIG_ENFORCE=y +CONFIG_EFI_SIGNATURE_LIST_PARSER=y CONFIG_MODULE_SIG_UEFI=y |