summaryrefslogtreecommitdiff
path: root/security/ipe/.gitignore
AgeCommit message (Collapse)AuthorFilesLines
2024-08-20scripts: add boot policy generation programDeven Bowers1-0/+2
Enables an IPE policy to be enforced from kernel start, enabling access control based on trust from kernel startup. This is accomplished by transforming an IPE policy indicated by CONFIG_IPE_BOOT_POLICY into a c-string literal that is parsed at kernel startup as an unsigned policy. Signed-off-by: Deven Bowers <deven.desai@linux.microsoft.com> Signed-off-by: Fan Wu <wufan@linux.microsoft.com> Signed-off-by: Paul Moore <paul@paul-moore.com>