From 4f983e9658dc322e58d27ac223a85239f46cdc17 Mon Sep 17 00:00:00 2001 From: Peter Robinson Date: Wed, 29 Jan 2020 13:15:29 +0000 Subject: ima: enable system extra cert to enable adding an extra cert without needing custom kernels --- kernel-s390x-debug-fedora.config | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) (limited to 'kernel-s390x-debug-fedora.config') diff --git a/kernel-s390x-debug-fedora.config b/kernel-s390x-debug-fedora.config index a1bb4356e..59ffebfc0 100644 --- a/kernel-s390x-debug-fedora.config +++ b/kernel-s390x-debug-fedora.config @@ -5275,7 +5275,8 @@ CONFIG_SYSCTL=y # CONFIG_SYSFS_DEPRECATED is not set CONFIG_SYSTEM_BLACKLIST_HASH_LIST="" CONFIG_SYSTEM_BLACKLIST_KEYRING=y -# CONFIG_SYSTEM_EXTRA_CERTIFICATE is not set +CONFIG_SYSTEM_EXTRA_CERTIFICATE_SIZE=4096 +CONFIG_SYSTEM_EXTRA_CERTIFICATE=y # CONFIG_SYSTEMPORT is not set CONFIG_SYSTEM_TRUSTED_KEYRING=y CONFIG_SYSTEM_TRUSTED_KEYS="" -- cgit