From 01acffc31a2413bc0241894c9c6e0e846221e807 Mon Sep 17 00:00:00 2001 From: Peter Robinson Date: Wed, 29 Jan 2020 13:15:29 +0000 Subject: ima: enable system extra cert to enable adding an extra cert without needing custom kernels --- kernel-x86_64-fedora.config | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) (limited to 'kernel-x86_64-fedora.config') diff --git a/kernel-x86_64-fedora.config b/kernel-x86_64-fedora.config index 6779e9683..7a4a1fd8e 100644 --- a/kernel-x86_64-fedora.config +++ b/kernel-x86_64-fedora.config @@ -5755,7 +5755,8 @@ CONFIG_SYSCTL=y CONFIG_SYSTEM76_ACPI=m CONFIG_SYSTEM_BLACKLIST_HASH_LIST="" CONFIG_SYSTEM_BLACKLIST_KEYRING=y -# CONFIG_SYSTEM_EXTRA_CERTIFICATE is not set +CONFIG_SYSTEM_EXTRA_CERTIFICATE_SIZE=4096 +CONFIG_SYSTEM_EXTRA_CERTIFICATE=y # CONFIG_SYSTEMPORT is not set CONFIG_SYSTEM_TRUSTED_KEYRING=y CONFIG_SYSTEM_TRUSTED_KEYS="" -- cgit