summaryrefslogtreecommitdiffstats
path: root/kernel-aarch64-debug-rhel.config
diff options
context:
space:
mode:
Diffstat (limited to 'kernel-aarch64-debug-rhel.config')
-rw-r--r--kernel-aarch64-debug-rhel.config32
1 files changed, 20 insertions, 12 deletions
diff --git a/kernel-aarch64-debug-rhel.config b/kernel-aarch64-debug-rhel.config
index 459ba71c0..7b8143b27 100644
--- a/kernel-aarch64-debug-rhel.config
+++ b/kernel-aarch64-debug-rhel.config
@@ -1502,7 +1502,7 @@ CONFIG_ENABLE_MUST_CHECK=y
# CONFIG_ENABLE_WARN_DEPRECATED is not set
CONFIG_ENA_ETHERNET=m
CONFIG_ENCLOSURE_SERVICES=m
-CONFIG_ENCRYPTED_KEYS=m
+CONFIG_ENCRYPTED_KEYS=y
CONFIG_ENERGY_MODEL=y
CONFIG_ENIC=m
CONFIG_EPIC100=m
@@ -1515,7 +1515,10 @@ CONFIG_ETHTOOL_NETLINK=y
# CONFIG_EUROTECH_WDT is not set
CONFIG_EVENT_TRACING=y
# CONFIG_EVM_ADD_XATTRS is not set
-# CONFIG_EVM is not set
+CONFIG_EVM_ATTR_FSUUID=y
+CONFIG_EVM_LOAD_X509=y
+CONFIG_EVM_X509_PATH="/etc/keys/x509_evm.der"
+CONFIG_EVM=y
# CONFIG_EXFAT_FS is not set
# CONFIG_EXPERT is not set
CONFIG_EXPORTFS_BLOCK_OPS=y
@@ -2141,25 +2144,28 @@ CONFIG_IIO_CONSUMERS_PER_TRIGGER=2
# CONFIG_IIO_TRIGGERED_EVENT is not set
# CONFIG_IKCONFIG is not set
# CONFIG_IKHEADERS is not set
-# CONFIG_IMA_APPRAISE_BOOTPARAM is not set
-# CONFIG_IMA_APPRAISE is not set
-# CONFIG_IMA_APPRAISE_MODSIG is not set
+CONFIG_IMA_APPRAISE_BOOTPARAM=y
+CONFIG_IMA_APPRAISE_MODSIG=y
+# CONFIG_IMA_APPRAISE_SIGNED_INIT is not set
+CONFIG_IMA_APPRAISE=y
# CONFIG_IMA_ARCH_POLICY is not set
# CONFIG_IMA_BLACKLIST_KEYRING is not set
-CONFIG_IMA_DEFAULT_HASH_SHA1=y
-# CONFIG_IMA_DEFAULT_HASH_SHA256 is not set
+# CONFIG_IMA_DEFAULT_HASH_SHA1 is not set
+CONFIG_IMA_DEFAULT_HASH="sha256"
+CONFIG_IMA_DEFAULT_HASH_SHA256=y
# CONFIG_IMA_DEFAULT_HASH_SHA512 is not set
# CONFIG_IMA_KEXEC is not set
# CONFIG_IMA_KEYRINGS_PERMIT_SIGNED_BY_BUILTIN_OR_SECONDARY is not set
-# CONFIG_IMA_LOAD_X509 is not set
+CONFIG_IMA_LOAD_X509=y
CONFIG_IMA_LSM_RULES=y
CONFIG_IMA_MEASURE_PCR_IDX=10
-CONFIG_IMA_NG_TEMPLATE=y
-# CONFIG_IMA_READ_POLICY is not set
-# CONFIG_IMA_SIG_TEMPLATE is not set
+# CONFIG_IMA_NG_TEMPLATE is not set
+CONFIG_IMA_READ_POLICY=y
+CONFIG_IMA_SIG_TEMPLATE=y
# CONFIG_IMA_TEMPLATE is not set
CONFIG_IMA_TRUSTED_KEYRING=y
# CONFIG_IMA_WRITE_POLICY is not set
+CONFIG_IMA_X509_PATH="/etc/keys/x509_ima.der"
CONFIG_IMA=y
# CONFIG_IMG_ASCII_LCD is not set
# CONFIG_IMX_SC_WDT is not set
@@ -2277,9 +2283,9 @@ CONFIG_INPUT=y
CONFIG_INPUT_YEALINK=m
# CONFIG_INT3406_THERMAL is not set
CONFIG_INTEGRITY_AUDIT=y
-# CONFIG_INTEGRITY is not set
# CONFIG_INTEGRITY_PLATFORM_KEYRING is not set
# CONFIG_INTEGRITY_SIGNATURE is not set
+CONFIG_INTEGRITY=y
# CONFIG_INTEL_ATOMISP2_PM is not set
# CONFIG_INTEL_IDMA64 is not set
CONFIG_INTEL_IDXD=m
@@ -2567,6 +2573,7 @@ CONFIG_KALLSYMS=y
CONFIG_KASAN_GENERIC=y
CONFIG_KASAN_INLINE=y
# CONFIG_KASAN_OUTLINE is not set
+# CONFIG_KASAN_SW_TAGS is not set
CONFIG_KASAN_VMALLOC=y
CONFIG_KASAN=y
# CONFIG_KCOV is not set
@@ -3630,6 +3637,7 @@ CONFIG_NFS_V3=m
CONFIG_NFS_V4_1_IMPLEMENTATION_ID_DOMAIN="kernel.org"
# CONFIG_NFS_V4_1_MIGRATION is not set
CONFIG_NFS_V4_1=y
+# CONFIG_NFS_V4_2_READ_PLUS is not set
CONFIG_NFS_V4_2=y
CONFIG_NFS_V4=m
CONFIG_NF_TABLES_ARP=y