From 4f983e9658dc322e58d27ac223a85239f46cdc17 Mon Sep 17 00:00:00 2001 From: Peter Robinson Date: Wed, 29 Jan 2020 13:15:29 +0000 Subject: ima: enable system extra cert to enable adding an extra cert without needing custom kernels --- kernel-armv7hl-lpae-fedora.config | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) (limited to 'kernel-armv7hl-lpae-fedora.config') diff --git a/kernel-armv7hl-lpae-fedora.config b/kernel-armv7hl-lpae-fedora.config index e330ecfb9..db2718fe6 100644 --- a/kernel-armv7hl-lpae-fedora.config +++ b/kernel-armv7hl-lpae-fedora.config @@ -6308,7 +6308,8 @@ CONFIG_SYSCTL=y CONFIG_SYS_SUPPORTS_HUGETLBFS=y CONFIG_SYSTEM_BLACKLIST_HASH_LIST="" CONFIG_SYSTEM_BLACKLIST_KEYRING=y -# CONFIG_SYSTEM_EXTRA_CERTIFICATE is not set +CONFIG_SYSTEM_EXTRA_CERTIFICATE_SIZE=4096 +CONFIG_SYSTEM_EXTRA_CERTIFICATE=y # CONFIG_SYSTEMPORT is not set CONFIG_SYSTEM_TRUSTED_KEYRING=y CONFIG_SYSTEM_TRUSTED_KEYS="" -- cgit