[deliverable/linux.git] / security / integrity / Kconfig

#
config INTEGRITY
	def_bool y
	depends on IMA || EVM

config INTEGRITY_DIGSIG
	boolean "Digital signature verification using multiple keyrings"
	depends on INTEGRITY && KEYS
	default n
	select SIGNATURE
	help
	  This option enables digital signature verification support
	  using multiple keyrings. It defines separate keyrings for each
	  of the different use cases - evm, ima, and modules.
	  Different keyrings improves search performance, but also allow
	  to "lock" certain keyring to prevent adding new keys.
	  This is useful for evm and module keyrings, when keys are
	  usually only added from initramfs.

source security/integrity/ima/Kconfig
source security/integrity/evm/Kconfig
Commit	Line	Data
f381c272 MZ	1	#
	2	config INTEGRITY
	3	def_bool y
66dbc325	4	depends on IMA \|\| EVM
f381c272	5
8607c501 DK	6	config INTEGRITY_DIGSIG
8607c501 DK	7	boolean "Digital signature verification using multiple keyrings"
de353533	8	depends on INTEGRITY && KEYS
8607c501	9	default n
5e8898e9	10	select SIGNATURE
8607c501 DK	11	help
	12	This option enables digital signature verification support
	13	using multiple keyrings. It defines separate keyrings for each
	14	of the different use cases - evm, ima, and modules.
	15	Different keyrings improves search performance, but also allow
	16	to "lock" certain keyring to prevent adding new keys.
	17	This is useful for evm and module keyrings, when keys are
	18	usually only added from initramfs.
	19
f381c272	20	source security/integrity/ima/Kconfig
66dbc325	21	source security/integrity/evm/Kconfig