blob: 5bd1cc1b4a54dcae8681bf7e0c092d374614ab6d [file] [log] [blame]
Mimi Zoharf381c272011-03-09 14:13:22 -05001#
2config INTEGRITY
3 def_bool y
Mimi Zohar66dbc3252011-03-15 16:12:09 -04004 depends on IMA || EVM
Mimi Zoharf381c272011-03-09 14:13:22 -05005
Dmitry Kasatkinf1be2422012-01-17 17:12:07 +02006config INTEGRITY_SIGNATURE
Dmitry Kasatkin8607c502011-10-05 11:54:46 +03007 boolean "Digital signature verification using multiple keyrings"
Dmitry Kasatkinde353532011-11-21 17:31:15 +02008 depends on INTEGRITY && KEYS
Dmitry Kasatkin8607c502011-10-05 11:54:46 +03009 default n
Dmitry Kasatkin5e8898e2012-01-17 17:12:03 +020010 select SIGNATURE
Dmitry Kasatkin8607c502011-10-05 11:54:46 +030011 help
12 This option enables digital signature verification support
13 using multiple keyrings. It defines separate keyrings for each
14 of the different use cases - evm, ima, and modules.
15 Different keyrings improves search performance, but also allow
16 to "lock" certain keyring to prevent adding new keys.
17 This is useful for evm and module keyrings, when keys are
18 usually only added from initramfs.
19
Mimi Zoharf381c272011-03-09 14:13:22 -050020source security/integrity/ima/Kconfig
Mimi Zohar66dbc3252011-03-15 16:12:09 -040021source security/integrity/evm/Kconfig