diff options
| author | Christian Poessinger <christian@poessinger.com> | 2020-09-13 17:45:44 +0200 |
|---|---|---|
| committer | Christian Poessinger <christian@poessinger.com> | 2020-09-13 17:51:41 +0200 |
| commit | b3bea80e348863879b93ed1359d92e0d53423856 (patch) | |
| tree | c11139e808ea3eea34f2e080b24267fedbc168fe /packages/linux-kernel/x86_64_vyos_defconfig | |
| parent | 94a553a52db3ab4a0f9e82016a7f7948b882a217 (diff) | |
| download | vyos-build-b3bea80e348863879b93ed1359d92e0d53423856.tar.gz vyos-build-b3bea80e348863879b93ed1359d92e0d53423856.zip | |
Kernel: T2879: remove integrity subsystem
When enabled this does:
This option enables the integrity subsystem, which is comprised of a number of
different components including the Integrity Measurement Architecture (IMA),
Extended Verification Module (EVM), IMA-appraisal extension, digital signature
verification extension and audit measurement log support.
We do not support secure-boot thus we do not need keyrings.
Diffstat (limited to 'packages/linux-kernel/x86_64_vyos_defconfig')
| -rw-r--r-- | packages/linux-kernel/x86_64_vyos_defconfig | 8 |
1 files changed, 1 insertions, 7 deletions
diff --git a/packages/linux-kernel/x86_64_vyos_defconfig b/packages/linux-kernel/x86_64_vyos_defconfig index 418d215a..4cae7eb5 100644 --- a/packages/linux-kernel/x86_64_vyos_defconfig +++ b/packages/linux-kernel/x86_64_vyos_defconfig @@ -4745,12 +4745,7 @@ CONFIG_FORTIFY_SOURCE=y # CONFIG_SECURITY_APPARMOR is not set # CONFIG_SECURITY_LOADPIN is not set # CONFIG_SECURITY_YAMA is not set -CONFIG_INTEGRITY=y -CONFIG_INTEGRITY_SIGNATURE=y -CONFIG_INTEGRITY_ASYMMETRIC_KEYS=y -CONFIG_INTEGRITY_TRUSTED_KEYRING=y -# CONFIG_IMA is not set -# CONFIG_EVM is not set +# CONFIG_INTEGRITY is not set CONFIG_DEFAULT_SECURITY_DAC=y CONFIG_DEFAULT_SECURITY="" CONFIG_CRYPTO=y @@ -5061,7 +5056,6 @@ CONFIG_CORDIC=m # CONFIG_DDR is not set CONFIG_IRQ_POLL=y CONFIG_MPILIB=y -CONFIG_SIGNATURE=y CONFIG_OID_REGISTRY=y CONFIG_UCS2_STRING=y CONFIG_FONT_SUPPORT=y |