rpms/kernel
3
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Disable IMA appraise (rhbz 1554474)

Browse Source 
A recent change to the EFI lockdown patch forces IMA policy to be loaded
when secureboot is used. Unfortunately, we don't have all the pieces in
place to have all components fully signed. Disable appraisal for now
until that gets fixed.
This commit is contained in:
Laura Abbott 2018-03-12 12:12:50 -07:00
parent 06a455a312
commit 4acc5bbea9
19 changed files with 19 additions and 19 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
configs/fedora/generic/CONFIG_IMA_APPRAISE
View File

@ -1 +1 @@
CONFIG_IMA_APPRAISE=y
# CONFIG_IMA_APPRAISE is not set

2
kernel-aarch64-debug.config
View File

@ -2206,7 +2206,7 @@ CONFIG_IIO_TRIGGERED_BUFFER=m
CONFIG_IIO_TRIGGER=y
# CONFIG_IKCONFIG is not set
CONFIG_IMA_APPRAISE_BOOTPARAM=y
CONFIG_IMA_APPRAISE=y
# CONFIG_IMA_APPRAISE is not set
# CONFIG_IMA_BLACKLIST_KEYRING is not set
CONFIG_IMA_KEYRINGS_PERMIT_SIGNED_BY_BUILTIN_OR_SECONDARY=y
# CONFIG_IMA_LOAD_X509 is not set

2
kernel-aarch64.config
View File

@ -2188,7 +2188,7 @@ CONFIG_IIO_TRIGGERED_BUFFER=m
CONFIG_IIO_TRIGGER=y
# CONFIG_IKCONFIG is not set
CONFIG_IMA_APPRAISE_BOOTPARAM=y
CONFIG_IMA_APPRAISE=y
# CONFIG_IMA_APPRAISE is not set
# CONFIG_IMA_BLACKLIST_KEYRING is not set
CONFIG_IMA_KEYRINGS_PERMIT_SIGNED_BY_BUILTIN_OR_SECONDARY=y
# CONFIG_IMA_LOAD_X509 is not set

2
kernel-armv7hl-debug.config
View File

@ -2330,7 +2330,7 @@ CONFIG_IIO_TRIGGERED_BUFFER=m
CONFIG_IIO_TRIGGER=y
# CONFIG_IKCONFIG is not set
CONFIG_IMA_APPRAISE_BOOTPARAM=y
CONFIG_IMA_APPRAISE=y
# CONFIG_IMA_APPRAISE is not set
# CONFIG_IMA_BLACKLIST_KEYRING is not set
CONFIG_IMA_KEYRINGS_PERMIT_SIGNED_BY_BUILTIN_OR_SECONDARY=y
# CONFIG_IMA_LOAD_X509 is not set

2
kernel-armv7hl-lpae-debug.config
View File

@ -2216,7 +2216,7 @@ CONFIG_IIO_TRIGGERED_BUFFER=m
CONFIG_IIO_TRIGGER=y
# CONFIG_IKCONFIG is not set
CONFIG_IMA_APPRAISE_BOOTPARAM=y
CONFIG_IMA_APPRAISE=y
# CONFIG_IMA_APPRAISE is not set
# CONFIG_IMA_BLACKLIST_KEYRING is not set
CONFIG_IMA_KEYRINGS_PERMIT_SIGNED_BY_BUILTIN_OR_SECONDARY=y
# CONFIG_IMA_LOAD_X509 is not set

2
kernel-armv7hl-lpae.config
View File

@ -2198,7 +2198,7 @@ CONFIG_IIO_TRIGGERED_BUFFER=m
CONFIG_IIO_TRIGGER=y
# CONFIG_IKCONFIG is not set
CONFIG_IMA_APPRAISE_BOOTPARAM=y
CONFIG_IMA_APPRAISE=y
# CONFIG_IMA_APPRAISE is not set
# CONFIG_IMA_BLACKLIST_KEYRING is not set
CONFIG_IMA_KEYRINGS_PERMIT_SIGNED_BY_BUILTIN_OR_SECONDARY=y
# CONFIG_IMA_LOAD_X509 is not set

2
kernel-armv7hl.config
View File

@ -2312,7 +2312,7 @@ CONFIG_IIO_TRIGGERED_BUFFER=m
CONFIG_IIO_TRIGGER=y
# CONFIG_IKCONFIG is not set
CONFIG_IMA_APPRAISE_BOOTPARAM=y
CONFIG_IMA_APPRAISE=y
# CONFIG_IMA_APPRAISE is not set
# CONFIG_IMA_BLACKLIST_KEYRING is not set
CONFIG_IMA_KEYRINGS_PERMIT_SIGNED_BY_BUILTIN_OR_SECONDARY=y
# CONFIG_IMA_LOAD_X509 is not set

2
kernel-i686-PAE.config
View File

@ -2053,7 +2053,7 @@ CONFIG_IIO_TRIGGERED_BUFFER=m
CONFIG_IIO_TRIGGER=y
# CONFIG_IKCONFIG is not set
CONFIG_IMA_APPRAISE_BOOTPARAM=y
CONFIG_IMA_APPRAISE=y
# CONFIG_IMA_APPRAISE is not set
# CONFIG_IMA_BLACKLIST_KEYRING is not set
CONFIG_IMA_KEYRINGS_PERMIT_SIGNED_BY_BUILTIN_OR_SECONDARY=y
# CONFIG_IMA_LOAD_X509 is not set

2
kernel-i686-PAEdebug.config
View File

@ -2072,7 +2072,7 @@ CONFIG_IIO_TRIGGERED_BUFFER=m
CONFIG_IIO_TRIGGER=y
# CONFIG_IKCONFIG is not set
CONFIG_IMA_APPRAISE_BOOTPARAM=y
CONFIG_IMA_APPRAISE=y
# CONFIG_IMA_APPRAISE is not set
# CONFIG_IMA_BLACKLIST_KEYRING is not set
CONFIG_IMA_KEYRINGS_PERMIT_SIGNED_BY_BUILTIN_OR_SECONDARY=y
# CONFIG_IMA_LOAD_X509 is not set

2
kernel-i686-debug.config
View File

@ -2072,7 +2072,7 @@ CONFIG_IIO_TRIGGERED_BUFFER=m
CONFIG_IIO_TRIGGER=y
# CONFIG_IKCONFIG is not set
CONFIG_IMA_APPRAISE_BOOTPARAM=y
CONFIG_IMA_APPRAISE=y
# CONFIG_IMA_APPRAISE is not set
# CONFIG_IMA_BLACKLIST_KEYRING is not set
CONFIG_IMA_KEYRINGS_PERMIT_SIGNED_BY_BUILTIN_OR_SECONDARY=y
# CONFIG_IMA_LOAD_X509 is not set

2
kernel-i686.config
View File

@ -2053,7 +2053,7 @@ CONFIG_IIO_TRIGGERED_BUFFER=m
CONFIG_IIO_TRIGGER=y
# CONFIG_IKCONFIG is not set
CONFIG_IMA_APPRAISE_BOOTPARAM=y
CONFIG_IMA_APPRAISE=y
# CONFIG_IMA_APPRAISE is not set
# CONFIG_IMA_BLACKLIST_KEYRING is not set
CONFIG_IMA_KEYRINGS_PERMIT_SIGNED_BY_BUILTIN_OR_SECONDARY=y
# CONFIG_IMA_LOAD_X509 is not set

2
kernel-ppc64-debug.config
View File

@ -1961,7 +1961,7 @@ CONFIG_IIO_TRIGGERED_BUFFER=m
CONFIG_IIO_TRIGGER=y
# CONFIG_IKCONFIG is not set
CONFIG_IMA_APPRAISE_BOOTPARAM=y
CONFIG_IMA_APPRAISE=y
# CONFIG_IMA_APPRAISE is not set
# CONFIG_IMA_BLACKLIST_KEYRING is not set
# CONFIG_IMA is not set
CONFIG_IMA_KEYRINGS_PERMIT_SIGNED_BY_BUILTIN_OR_SECONDARY=y

2
kernel-ppc64.config
View File

@ -1942,7 +1942,7 @@ CONFIG_IIO_TRIGGERED_BUFFER=m
CONFIG_IIO_TRIGGER=y
# CONFIG_IKCONFIG is not set
CONFIG_IMA_APPRAISE_BOOTPARAM=y
CONFIG_IMA_APPRAISE=y
# CONFIG_IMA_APPRAISE is not set
# CONFIG_IMA_BLACKLIST_KEYRING is not set
# CONFIG_IMA is not set
CONFIG_IMA_KEYRINGS_PERMIT_SIGNED_BY_BUILTIN_OR_SECONDARY=y

2
kernel-ppc64le-debug.config
View File

@ -1906,7 +1906,7 @@ CONFIG_IIO_TRIGGERED_BUFFER=m
CONFIG_IIO_TRIGGER=y
# CONFIG_IKCONFIG is not set
CONFIG_IMA_APPRAISE_BOOTPARAM=y
CONFIG_IMA_APPRAISE=y
# CONFIG_IMA_APPRAISE is not set
# CONFIG_IMA_BLACKLIST_KEYRING is not set
# CONFIG_IMA is not set
CONFIG_IMA_KEYRINGS_PERMIT_SIGNED_BY_BUILTIN_OR_SECONDARY=y

2
kernel-ppc64le.config
View File

@ -1887,7 +1887,7 @@ CONFIG_IIO_TRIGGERED_BUFFER=m
CONFIG_IIO_TRIGGER=y
# CONFIG_IKCONFIG is not set
CONFIG_IMA_APPRAISE_BOOTPARAM=y
CONFIG_IMA_APPRAISE=y
# CONFIG_IMA_APPRAISE is not set
# CONFIG_IMA_BLACKLIST_KEYRING is not set
# CONFIG_IMA is not set
CONFIG_IMA_KEYRINGS_PERMIT_SIGNED_BY_BUILTIN_OR_SECONDARY=y

2
kernel-s390x-debug.config
View File

@ -1861,7 +1861,7 @@ CONFIG_IIO_TRIGGERED_BUFFER=m
CONFIG_IIO_TRIGGER=y
# CONFIG_IKCONFIG is not set
CONFIG_IMA_APPRAISE_BOOTPARAM=y
CONFIG_IMA_APPRAISE=y
# CONFIG_IMA_APPRAISE is not set
# CONFIG_IMA_BLACKLIST_KEYRING is not set
CONFIG_IMA_KEYRINGS_PERMIT_SIGNED_BY_BUILTIN_OR_SECONDARY=y
# CONFIG_IMA_LOAD_X509 is not set

2
kernel-s390x.config
View File

@ -1842,7 +1842,7 @@ CONFIG_IIO_TRIGGERED_BUFFER=m
CONFIG_IIO_TRIGGER=y
# CONFIG_IKCONFIG is not set
CONFIG_IMA_APPRAISE_BOOTPARAM=y
CONFIG_IMA_APPRAISE=y
# CONFIG_IMA_APPRAISE is not set
# CONFIG_IMA_BLACKLIST_KEYRING is not set
CONFIG_IMA_KEYRINGS_PERMIT_SIGNED_BY_BUILTIN_OR_SECONDARY=y
# CONFIG_IMA_LOAD_X509 is not set

2
kernel-x86_64-debug.config
View File

@ -2119,7 +2119,7 @@ CONFIG_IIO_TRIGGERED_BUFFER=m
CONFIG_IIO_TRIGGER=y
# CONFIG_IKCONFIG is not set
CONFIG_IMA_APPRAISE_BOOTPARAM=y
CONFIG_IMA_APPRAISE=y
# CONFIG_IMA_APPRAISE is not set
# CONFIG_IMA_BLACKLIST_KEYRING is not set
CONFIG_IMA_KEYRINGS_PERMIT_SIGNED_BY_BUILTIN_OR_SECONDARY=y
# CONFIG_IMA_LOAD_X509 is not set

2
kernel-x86_64.config
View File

@ -2100,7 +2100,7 @@ CONFIG_IIO_TRIGGERED_BUFFER=m
CONFIG_IIO_TRIGGER=y
# CONFIG_IKCONFIG is not set
CONFIG_IMA_APPRAISE_BOOTPARAM=y
CONFIG_IMA_APPRAISE=y
# CONFIG_IMA_APPRAISE is not set
# CONFIG_IMA_BLACKLIST_KEYRING is not set
CONFIG_IMA_KEYRINGS_PERMIT_SIGNED_BY_BUILTIN_OR_SECONDARY=y
# CONFIG_IMA_LOAD_X509 is not set