summaryrefslogtreecommitdiffstats
path: root/kernel-ppc64-debug.config
diff options
context:
space:
mode:
authorLaura Abbott <labbott@redhat.com>2018-02-19 10:40:39 -0800
committerLaura Abbott <labbott@redhat.com>2018-02-19 10:54:11 -0800
commitbb540d20c6388d18e5977f14f35f96318be223e1 (patch)
treef5166330c1a93deb7e1847c180522fe05d75c740 /kernel-ppc64-debug.config
parent08732ed8268cbd9fd23dfae32ffa18ea320b910e (diff)
downloadkernel-bb540d20c6388d18e5977f14f35f96318be223e1.tar.gz
kernel-bb540d20c6388d18e5977f14f35f96318be223e1.tar.xz
kernel-bb540d20c6388d18e5977f14f35f96318be223e1.zip
Enable IMA (rhbz 790008)
Diffstat (limited to 'kernel-ppc64-debug.config')
-rw-r--r--kernel-ppc64-debug.config15
1 files changed, 13 insertions, 2 deletions
diff --git a/kernel-ppc64-debug.config b/kernel-ppc64-debug.config
index 82d89af16..eb1ec4f35 100644
--- a/kernel-ppc64-debug.config
+++ b/kernel-ppc64-debug.config
@@ -1960,9 +1960,17 @@ CONFIG_IIO_TIGHTLOOP_TRIGGER=m
CONFIG_IIO_TRIGGERED_BUFFER=m
CONFIG_IIO_TRIGGER=y
# CONFIG_IKCONFIG is not set
+CONFIG_IMA_APPRAISE_BOOTPARAM=y
+CONFIG_IMA_APPRAISE=y
+# CONFIG_IMA_BLACKLIST_KEYRING is not set
# CONFIG_IMA is not set
+CONFIG_IMA_KEYRINGS_PERMIT_SIGNED_BY_BUILTIN_OR_SECONDARY=y
+# CONFIG_IMA_LOAD_X509 is not set
CONFIG_IMA_LSM_RULES=y
CONFIG_IMA_MEASURE_PCR_IDX=10
+CONFIG_IMA_READ_POLICY=y
+CONFIG_IMA_TRUSTED_KEYRING=y
+CONFIG_IMA_WRITE_POLICY=y
# CONFIG_IMG_ASCII_LCD is not set
# CONFIG_INA2XX_ADC is not set
CONFIG_INET6_AH=m
@@ -2076,7 +2084,10 @@ CONFIG_INPUT_WISTRON_BTNS=m
CONFIG_INPUT_WM831X_ON=m
CONFIG_INPUT=y
CONFIG_INPUT_YEALINK=m
-# CONFIG_INTEGRITY is not set
+CONFIG_INTEGRITY_ASYMMETRIC_KEYS=y
+CONFIG_INTEGRITY_AUDIT=y
+CONFIG_INTEGRITY_SIGNATURE=y
+CONFIG_INTEGRITY=y
# CONFIG_INTEL_IDMA64 is not set
CONFIG_INTEL_SOC_PMIC_CHTDC_TI=m
# CONFIG_INTEL_SOC_PMIC is not set
@@ -5121,11 +5132,11 @@ CONFIG_TCG_NSC=m
# CONFIG_TCG_TIS_I2C_ATMEL is not set
# CONFIG_TCG_TIS_I2C_INFINEON is not set
# CONFIG_TCG_TIS_I2C_NUVOTON is not set
-CONFIG_TCG_TIS=m
# CONFIG_TCG_TIS_SPI is not set
# CONFIG_TCG_TIS_ST33ZP24_I2C is not set
# CONFIG_TCG_TIS_ST33ZP24 is not set
# CONFIG_TCG_TIS_ST33ZP24_SPI is not set
+CONFIG_TCG_TIS=y
# CONFIG_TCG_TPM is not set
# CONFIG_TCG_VTPM_PROXY is not set
# CONFIG_TCG_XEN is not set