[PATCH] ima: add a new CONFIG for loading arch-specific policies

Lakshmi Ramasubramanian nramas at linux.microsoft.com
Thu Feb 27 06:21:28 AEDT 2020


Hi Nayna,

> +
> +config IMA_SECURE_AND_OR_TRUSTED_BOOT
> +	bool
> +	depends on IMA
> +	depends on IMA_ARCH_POLICY
> +	default n
> +	help
> +	   This option is selected by architectures to enable secure and/or
> +	   trusted boot based on IMA runtime policies.
> 

Why is the default for this new config "n"?
Is there any reason to not turn on this config if both IMA and 
IMA_ARCH_POLICY are set to y?

thanks,
  -lakshmi



More information about the Linuxppc-dev mailing list