diff options
author | Peter Robinson <pbrobinson@gmail.com> | 2019-07-17 11:09:36 +0100 |
---|---|---|
committer | Peter Robinson <pbrobinson@gmail.com> | 2019-07-17 11:17:23 +0100 |
commit | a344da7077566c43ffc3ea9b6f0fe5d7d69c8045 (patch) | |
tree | 13854f5e2253e9e5c41cfbb40d95c12d56b49dd6 /kernel-i686.config | |
parent | 10a3f2eb22d23a5a28b1e474bf2caa3f07d5f70a (diff) | |
download | kernel-a344da7077566c43ffc3ea9b6f0fe5d7d69c8045.tar.gz kernel-a344da7077566c43ffc3ea9b6f0fe5d7d69c8045.tar.xz kernel-a344da7077566c43ffc3ea9b6f0fe5d7d69c8045.zip |
IMA: change default hash from sha1 to sha256, the later is more secuure and hence should be the default
Diffstat (limited to 'kernel-i686.config')
-rw-r--r-- | kernel-i686.config | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/kernel-i686.config b/kernel-i686.config index fe4a05435..4aaff465d 100644 --- a/kernel-i686.config +++ b/kernel-i686.config @@ -2131,8 +2131,8 @@ CONFIG_IIO_TRIGGER=y # CONFIG_IKCONFIG is not set # CONFIG_IMA_APPRAISE is not set # CONFIG_IMA_ARCH_POLICY is not set -CONFIG_IMA_DEFAULT_HASH_SHA1=y -# CONFIG_IMA_DEFAULT_HASH_SHA256 is not set +# CONFIG_IMA_DEFAULT_HASH_SHA1 is not set +CONFIG_IMA_DEFAULT_HASH_SHA256=y CONFIG_IMA_KEYRINGS_PERMIT_SIGNED_BY_BUILTIN_OR_SECONDARY=y CONFIG_IMA_LSM_RULES=y CONFIG_IMA_MEASURE_PCR_IDX=10 |