diff options
| author | Josh Boyer <jwboyer@redhat.com> | 2012-03-06 16:09:57 -0500 |
|---|---|---|
| committer | Josh Boyer <jwboyer@redhat.com> | 2012-03-07 15:07:26 -0500 |
| commit | c2a12cd16fff536ed98eb457a85b3a0842b4f825 (patch) | |
| tree | 398dfcafb0c679693ab2759f961109f079a93187 /config-x86-generic | |
| parent | 8247ca06d49598742ec4a0d39b9600e71d410f1e (diff) | |
| download | kernel-c2a12cd16fff536ed98eb457a85b3a0842b4f825.tar.gz kernel-c2a12cd16fff536ed98eb457a85b3a0842b4f825.tar.xz kernel-c2a12cd16fff536ed98eb457a85b3a0842b4f825.zip | |
Add kernel module signing on x86
Leave enforcing disabled for now, so unsigned modules can still load. This
can be switched by adding "enforcemodulesig=1" to the kernel command line.
Diffstat (limited to 'config-x86-generic')
| -rw-r--r-- | config-x86-generic | 5 |
1 files changed, 5 insertions, 0 deletions
diff --git a/config-x86-generic b/config-x86-generic index 02e1fe7d1..d8f4d0332 100644 --- a/config-x86-generic +++ b/config-x86-generic @@ -403,3 +403,8 @@ CONFIG_DRM_GMA500=m # Maybe enable in debug kernels? # CONFIG_DEBUG_NMI_SELFTEST is not set +CONFIG_MPILIB=y +CONFIG_MODULE_SIG=y +# CONFIG_MODULE_SIG_SHA1 is not set +CONFIG_MODULE_SIG_SHA256=y +# CONFIG_MODULE_SIG_FORCE is not set |