From d5eb8951d21de01921873e100743a52bae060e90 Mon Sep 17 00:00:00 2001 From: Vivek Goyal Date: Wed, 3 Sep 2014 15:46:01 -0400 Subject: config: Enable kexec bzImage signature verification New kexec syscall (kexec_file_load()) can perform bzimage signature verification. This will re-enable kexec/kdump on secureboot systems using new syscall. Currently kexec/kdump is disabled on secureboot systems. User space (kexec-tools) will be modifed to automatically detect that running system has secureboot enabled and use new syscall instead of old one. Signed-off-by: Vivek Goyal --- config-x86_64-generic | 3 +++ 1 file changed, 3 insertions(+) (limited to 'config-x86_64-generic') diff --git a/config-x86_64-generic b/config-x86_64-generic index f4177d544..a19011733 100644 --- a/config-x86_64-generic +++ b/config-x86_64-generic @@ -42,6 +42,9 @@ CONFIG_CGROUP_HUGETLB=y CONFIG_MEM_SOFT_DIRTY=y CONFIG_KEXEC_JUMP=y +CONFIG_KEXEC_FILE=y +CONFIG_KEXEC_VERIFY_SIG=y +CONFIG_KEXEC_BZIMAGE_VERIFY_SIG=y CONFIG_ACPI_HOTPLUG_MEMORY=y -- cgit