[isar-cip-core][PATCH] Kconfig: Let disk encryption depend on secure boot
From: Jan Kiszka <jan.kiszka@siemens.com>
Date: 2026-09-06 11:33:02
Subsystem:
the rest · Maintainer:
Linus Torvalds
From: Jan Kiszka <jan.kiszka@siemens.com> This is now enforced by the encryption hook. Signed-off-by: Jan Kiszka <jan.kiszka@siemens.com> --- Kconfig | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-)
diff --git a/Kconfig b/Kconfig
index 7575d89c..dae87f6e 100644
--- a/Kconfig
+++ b/Kconfig@@ -1,7 +1,7 @@ # # CIP Core, generic profile # -# Copyright (c) Siemens AG, 2021-2025 +# Copyright (c) Siemens AG, 2021-2026 # # Authors: # Jan Kiszka <jan.kiszka@siemens.com>
@@ -342,13 +342,13 @@ config KAS_INCLUDE_DELTA_UPDATE config IMAGE_DATA_ENCRYPTION bool "Encrypt data partitions on first boot" - depends on HAS_DISK_ENCRYPTION + depends on HAS_DISK_ENCRYPTION && IMAGE_SECURE_BOOT help This enables LUKS encryption for the partitions /var and /home. config IMAGE_FULL_ENCRYPTION bool "Encrypt rootfs and data partitions" - depends on HAS_DISK_ENCRYPTION + depends on HAS_DISK_ENCRYPTION && IMAGE_SECURE_BOOT select IMAGE_DATA_ENCRYPTION help This enables LUKS encryption for all non-boot partitions on first boot.
--
2.47.3