[PATCH] integrity/ima: Provide Kconfig option for ima-modsig template
flat view
STALE2069d
From: Michael Weiß <hidden>
Date: 2021-02-15 10:29:01
Also in:
linux-integrity, lkml
Subsystem:
extended verification module (evm), integrity measurement architecture (ima), security subsystem, the rest · Maintainers:
Mimi Zohar, Roberto Sassu, Dmitry Kasatkin, Paul Moore, James Morris, "Serge E. Hallyn", Linus Torvalds
'ima-modsig' was not in the list of selectable templates in Kconfig. The missing Kconfig options were added to support the ima-modsig template as default template. Signed-off-by: Michael Weiß <redacted> --- security/integrity/ima/Kconfig | 3 +++ 1 file changed, 3 insertions(+)
diff --git a/security/integrity/ima/Kconfig b/security/integrity/ima/Kconfig
index 12e9250c1bec..32b9325f49bf 100644
--- a/security/integrity/ima/Kconfig
+++ b/security/integrity/ima/Kconfig@@ -78,6 +78,8 @@ choice bool "ima-ng (default)" config IMA_SIG_TEMPLATE bool "ima-sig" + config IMA_MODSIG_TEMPLATE + bool "ima-modsig" endchoice config IMA_DEFAULT_TEMPLATE
@@ -86,6 +88,7 @@ config IMA_DEFAULT_TEMPLATE default "ima" if IMA_TEMPLATE default "ima-ng" if IMA_NG_TEMPLATE default "ima-sig" if IMA_SIG_TEMPLATE + default "ima-modsig" if IMA_MODSIG_TEMPLATE choice prompt "Default integrity hash algorithm"
--
2.20.1