diff options
| author | Mimi Zohar <zohar@linux.vnet.ibm.com> | 2017-04-25 05:06:49 +0300 |
|---|---|---|
| committer | Mimi Zohar <zohar@linux.vnet.ibm.com> | 2017-06-21 21:37:12 +0300 |
| commit | e1f5e01f4b035ced1c71b40866e4e5c0508fbb0b (patch) | |
| tree | d17fa7316999c9dd88e05d061c2d34b168f54661 /security/integrity/ima/Kconfig | |
| parent | 503ceaef8e2e7dbbdb04a867acc6fe4c548ede7f (diff) | |
| download | linux-e1f5e01f4b035ced1c71b40866e4e5c0508fbb0b.tar.xz | |
ima: define Kconfig IMA_APPRAISE_BOOTPARAM option
Permit enabling the different "ima_appraise=" modes (eg. log, fix)
from the boot command line.
Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>
Diffstat (limited to 'security/integrity/ima/Kconfig')
| -rw-r--r-- | security/integrity/ima/Kconfig | 8 |
1 files changed, 8 insertions, 0 deletions
diff --git a/security/integrity/ima/Kconfig b/security/integrity/ima/Kconfig index 370eb2f4dd37..8b688a26033d 100644 --- a/security/integrity/ima/Kconfig +++ b/security/integrity/ima/Kconfig @@ -155,6 +155,14 @@ config IMA_APPRAISE <http://linux-ima.sourceforge.net> If unsure, say N. +config IMA_APPRAISE_BOOTPARAM + bool "ima_appraise boot parameter" + depends on IMA_APPRAISE + default y + help + This option enables the different "ima_appraise=" modes + (eg. fix, log) from the boot command line. + config IMA_TRUSTED_KEYRING bool "Require all keys on the .ima keyring be signed (deprecated)" depends on IMA_APPRAISE && SYSTEM_TRUSTED_KEYRING |