Re: [PATCH] ima: clean up IMA_MEASURE_PCR_IDX in Kconfig

On Sat, 2026-08-22 at 01:15 +0100, Julian Braha wrote:

The IMA_MEASURE_PCR_IDX option is not visible for users to set, so it
always uses its default, 10. This means that the 'range 8 14' is dead
code, and the "If unsure, use the default 10" in the help text is
misleading because the user *has no other choice*.

During the first patch submission to add this option in 2008 [1],
the submitter originally gave this option a prompt:

"PCR for Aggregate (8 <= Index <= 14)"

then later removed it in the revision, without adjusting the rest of the
option accordingly [2].

Let's clean up this of this IMA_MEASURE_PCR_IDX config option to be
consistent with its current, non-visible state.

This dead range was found by kconfirm, a static analysis tool for Kconfig.

Signed-off-by: Julian Braha <julianbraha@gmail.com>

The PCR index can be specified as a Kconfig IMA_MEASURE_PCR_IDX and on
individual policy records via the "pcr=" option.

Mimi