rpms/kernel
2
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity
46f3e4dbcb
kernel/configs/fedora/generic/x86/CONFIG_LOCK_DOWN_KERNEL_FORCE

2 lines
43 B
Plaintext
Raw Normal View History

Rebase the kernel lockdown patch set Use the latest version of the kernel lockdown patch set. This includes a few configuration renames: CONFIG_KEXEC_VERIFY_SIG became CONFIG_KEXEC_SIG and CONFIG_KEXEC_SIG_FORCE was added. CONFIG_KEXEC_SIG_FORCE=n because the "kexec_file: Restrict at runtime if the kernel is locked down" patch enforces the signature requirement when the kernel is locked down. CONFIG_LOCK_DOWN_MANDATORY got renamed to CONFIG_LOCK_DOWN_KERNEL_FORCE and remains false as LOCK_DOWN_IN_EFI_SECURE_BOOT covers enabling it for EFI Secure Boot users. Finally, the SysRq patches got dropped for the present.
2019-04-15 15:10:59 +00:00
# CONFIG_LOCK_DOWN_KERNEL_FORCE is not set
Reference in New Issue Copy Permalink