Skip to content

Commit 03d97a4

Browse files
committed
README: update requirements for signed dm-verity
The newest kconfig enabling DB-verified dm-verity images is queued for 6.11: https://patchwork.kernel.org/project/dm-devel/patch/[email protected]/ (cherry picked from commit a79b6dc) (cherry picked from commit c32f71a) (cherry picked from commit d34f0de)
1 parent dffa62c commit 03d97a4

File tree

1 file changed

+3
-2
lines changed

1 file changed

+3
-2
lines changed

README

Lines changed: 3 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -128,9 +128,10 @@ REQUIREMENTS:
128128

129129
Required for signed Verity images support:
130130
CONFIG_DM_VERITY_VERIFY_ROOTHASH_SIG
131-
Required to verify signed Verity images using keys enrolled in the MoK
132-
(Machine-Owner Key) keyring:
131+
Required to verify signed Verity images using keys enrolled in the MOK
132+
(Machine-Owner Key) and DB UEFI certificate stores:
133133
CONFIG_DM_VERITY_VERIFY_ROOTHASH_SIG_SECONDARY_KEYRING
134+
CONFIG_DM_VERITY_VERIFY_ROOTHASH_SIG_PLATFORM_KEYRING
134135
CONFIG_IMA_ARCH_POLICY
135136
CONFIG_INTEGRITY_MACHINE_KEYRING
136137

0 commit comments

Comments
 (0)