diff options
| author | Vivek Goyal <vgoyal@redhat.com> | 2014-09-03 15:46:01 -0400 |
|---|---|---|
| committer | Josh Boyer <jwboyer@fedoraproject.org> | 2014-09-04 08:12:26 -0400 |
| commit | d5eb8951d21de01921873e100743a52bae060e90 (patch) | |
| tree | b51820b29d724f1f7c3512dfceebf9d3f36da1a9 /config-x86_64-generic | |
| parent | 0806fade3230fb1c3ec2c2ec17167524b53e68fa (diff) | |
| download | kernel-d5eb8951d21de01921873e100743a52bae060e90.tar.gz kernel-d5eb8951d21de01921873e100743a52bae060e90.tar.xz kernel-d5eb8951d21de01921873e100743a52bae060e90.zip | |
config: Enable kexec bzImage signature verification
New kexec syscall (kexec_file_load()) can perform bzimage signature
verification.
This will re-enable kexec/kdump on secureboot systems using new syscall.
Currently kexec/kdump is disabled on secureboot systems.
User space (kexec-tools) will be modifed to automatically detect that
running system has secureboot enabled and use new syscall instead of
old one.
Signed-off-by: Vivek Goyal <vgoyal@redhat.com>
Diffstat (limited to 'config-x86_64-generic')
| -rw-r--r-- | config-x86_64-generic | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/config-x86_64-generic b/config-x86_64-generic index f4177d544..a19011733 100644 --- a/config-x86_64-generic +++ b/config-x86_64-generic @@ -42,6 +42,9 @@ CONFIG_CGROUP_HUGETLB=y CONFIG_MEM_SOFT_DIRTY=y CONFIG_KEXEC_JUMP=y +CONFIG_KEXEC_FILE=y +CONFIG_KEXEC_VERIFY_SIG=y +CONFIG_KEXEC_BZIMAGE_VERIFY_SIG=y CONFIG_ACPI_HOTPLUG_MEMORY=y |