@@ -34,10 +34,10 @@ config INTEGRITY_ASYMMETRIC_KEYS
34
34
bool "Enable asymmetric keys support"
35
35
depends on INTEGRITY_SIGNATURE
36
36
default n
37
- select ASYMMETRIC_KEY_TYPE
38
- select ASYMMETRIC_PUBLIC_KEY_SUBTYPE
39
- select CRYPTO_RSA
40
- select X509_CERTIFICATE_PARSER
37
+ select ASYMMETRIC_KEY_TYPE
38
+ select ASYMMETRIC_PUBLIC_KEY_SUBTYPE
39
+ select CRYPTO_RSA
40
+ select X509_CERTIFICATE_PARSER
41
41
help
42
42
This option enables digital signature verification using
43
43
asymmetric keys.
@@ -53,14 +53,14 @@ config INTEGRITY_TRUSTED_KEYRING
53
53
keyring.
54
54
55
55
config INTEGRITY_PLATFORM_KEYRING
56
- bool "Provide keyring for platform/firmware trusted keys"
57
- depends on INTEGRITY_ASYMMETRIC_KEYS
58
- depends on SYSTEM_BLACKLIST_KEYRING
59
- help
60
- Provide a separate, distinct keyring for platform trusted keys, which
61
- the kernel automatically populates during initialization from values
62
- provided by the platform for verifying the kexec'ed kerned image
63
- and, possibly, the initramfs signature.
56
+ bool "Provide keyring for platform/firmware trusted keys"
57
+ depends on INTEGRITY_ASYMMETRIC_KEYS
58
+ depends on SYSTEM_BLACKLIST_KEYRING
59
+ help
60
+ Provide a separate, distinct keyring for platform trusted keys, which
61
+ the kernel automatically populates during initialization from values
62
+ provided by the platform for verifying the kexec'ed kerned image
63
+ and, possibly, the initramfs signature.
64
64
65
65
config INTEGRITY_MACHINE_KEYRING
66
66
bool "Provide a keyring to which Machine Owner Keys may be added"
@@ -71,10 +71,10 @@ config INTEGRITY_MACHINE_KEYRING
71
71
select INTEGRITY_CA_MACHINE_KEYRING if LOAD_PPC_KEYS
72
72
select INTEGRITY_CA_MACHINE_KEYRING_MAX if LOAD_PPC_KEYS
73
73
help
74
- If set, provide a keyring to which Machine Owner Keys (MOK) may
75
- be added. This keyring shall contain just MOK keys. Unlike keys
76
- in the platform keyring, keys contained in the .machine keyring will
77
- be trusted within the kernel.
74
+ If set, provide a keyring to which Machine Owner Keys (MOK) may
75
+ be added. This keyring shall contain just MOK keys. Unlike keys
76
+ in the platform keyring, keys contained in the .machine keyring will
77
+ be trusted within the kernel.
78
78
79
79
config INTEGRITY_CA_MACHINE_KEYRING
80
80
bool "Enforce Machine Keyring CA Restrictions"
@@ -99,14 +99,14 @@ config INTEGRITY_CA_MACHINE_KEYRING_MAX
99
99
.platform keyring.
100
100
101
101
config LOAD_UEFI_KEYS
102
- depends on INTEGRITY_PLATFORM_KEYRING
103
- depends on EFI
104
- def_bool y
102
+ depends on INTEGRITY_PLATFORM_KEYRING
103
+ depends on EFI
104
+ def_bool y
105
105
106
106
config LOAD_IPL_KEYS
107
- depends on INTEGRITY_PLATFORM_KEYRING
108
- depends on S390
109
- def_bool y
107
+ depends on INTEGRITY_PLATFORM_KEYRING
108
+ depends on S390
109
+ def_bool y
110
110
111
111
config LOAD_PPC_KEYS
112
112
bool "Enable loading of platform and blacklisted keys for POWER"
0 commit comments