diff options
author | Justin M. Forbes <jforbes@fedoraproject.org> | 2022-05-16 09:13:38 -0500 |
---|---|---|
committer | Justin M. Forbes <jforbes@fedoraproject.org> | 2022-05-16 09:13:38 -0500 |
commit | f770443a3c7d11acb1b7e800a6b2eccf0ac8b4ab (patch) | |
tree | 39964301868787c4eaaf0dc231b00f057c839660 /kernel-armv7hl-debug-fedora.config | |
parent | 483a93c5de77fdc40a4aeefc5fac9fae4180a9e3 (diff) | |
download | kernel-f770443a3c7d11acb1b7e800a6b2eccf0ac8b4ab.tar.gz kernel-f770443a3c7d11acb1b7e800a6b2eccf0ac8b4ab.tar.xz kernel-f770443a3c7d11acb1b7e800a6b2eccf0ac8b4ab.zip |
kernel-5.18.0-0.rc7.54
* Mon May 16 2022 Fedora Kernel Team <kernel-team@fedoraproject.org> [5.18.0-0.rc7.53]
- Add CONFIG_EFI_DXE_MEM_ATTRIBUTES (Justin M. Forbes)
- efi: x86: Set the NX-compatibility flag in the PE header (Peter Jones)
- efi: libstub: ensure allocated memory to be executable (Baskov Evgeniy)
- efi: libstub: declare DXE services table (Baskov Evgeniy)
Resolves:
Signed-off-by: Justin M. Forbes <jforbes@fedoraproject.org>
Diffstat (limited to 'kernel-armv7hl-debug-fedora.config')
-rw-r--r-- | kernel-armv7hl-debug-fedora.config | 4 |
1 files changed, 3 insertions, 1 deletions
diff --git a/kernel-armv7hl-debug-fedora.config b/kernel-armv7hl-debug-fedora.config index a484a535d..6020f5a72 100644 --- a/kernel-armv7hl-debug-fedora.config +++ b/kernel-armv7hl-debug-fedora.config @@ -2908,7 +2908,7 @@ CONFIG_IMA_DEFAULT_HASH_SHA256=y # CONFIG_IMA_DEFAULT_HASH_SHA512 is not set # CONFIG_IMA_DISABLE_HTABLE is not set CONFIG_IMA_KEXEC=y -CONFIG_IMA_KEYRINGS_PERMIT_SIGNED_BY_BUILTIN_OR_SECONDARY=y +# CONFIG_IMA_KEYRINGS_PERMIT_SIGNED_BY_BUILTIN_OR_SECONDARY is not set # CONFIG_IMA_LOAD_X509 is not set CONFIG_IMA_LSM_RULES=y CONFIG_IMA_MEASURE_PCR_IDX=10 @@ -3067,6 +3067,7 @@ CONFIG_INPUT=y CONFIG_INPUT_YEALINK=m CONFIG_INTEGRITY_ASYMMETRIC_KEYS=y CONFIG_INTEGRITY_AUDIT=y +CONFIG_INTEGRITY_MACHINE_KEYRING=y CONFIG_INTEGRITY_PLATFORM_KEYRING=y CONFIG_INTEGRITY_SIGNATURE=y CONFIG_INTEGRITY_TRUSTED_KEYRING=y @@ -3667,6 +3668,7 @@ CONFIG_LIVEPATCH=y CONFIG_LLC=m # CONFIG_LMK04832 is not set CONFIG_LMP91000=m +CONFIG_LOAD_UEFI_KEYS=y CONFIG_LOCALVERSION="" # CONFIG_LOCALVERSION_AUTO is not set CONFIG_LOCKDEP_BITS=16 |