Following are config file changes to enable this feature. >From ca23231e0b79c7db4b776a16a276215443a6a499 Mon Sep 17 00:00:00 2001 From: Vivek Goyal <vgoyal@xxxxxxxxxx> Date: Wed, 4 Sep 2013 17:35:54 -0400 Subject: [PATCH 1/1] config: config file changes for enabling elf binary signature verification Enable elf binary signature verification in fedora kernel. Signed-off-by: Vivek Goyal <vgoyal@xxxxxxxxxx> --- config-generic | 2 ++ config-x86-generic | 2 ++ 2 files changed, 4 insertions(+) diff --git a/config-generic b/config-generic index 0acca31..9ab3532 100644 --- a/config-generic +++ b/config-generic @@ -4851,3 +4851,5 @@ CONFIG_FMC_CHARDEV=m # CONFIG_CRYPTO_KEY_TYPE is not set # CONFIG_PGP_LIBRARY is not set # CONFIG_PGP_PRELOAD is not set +# CONFIG_BINFMT_ELF_SIG is not set +# CONFIG_INTEGRITY_AUDIT is not set diff --git a/config-x86-generic b/config-x86-generic index 3c3a0dd..d115b81 100644 --- a/config-x86-generic +++ b/config-x86-generic @@ -455,3 +455,5 @@ CONFIG_MODULE_SIG_UEFI=y CONFIG_VMXNET3=m CONFIG_VFIO_PCI_VGA=y + +CONFIG_BINFMT_ELF_SIG=y -- 1.8.3.1 _______________________________________________ kernel mailing list kernel@xxxxxxxxxxxxxxxxxxxxxxx https://admin.fedoraproject.org/mailman/listinfo/kernel
