[OS-BUILD PATCH 5/16] redhat: enable CONFIG_IMA_ARCH_POLICY for ppc and x86

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



From: Bruno Meneguele <bmeneg@xxxxxxxxxx>

Upstream kernel supports specific architecture IMA policies and has been
requested by IBM on RHEL. With that, enable it on ARK and Fedora too.

Two another options: PPC_SECURE_BOOT and PPC_SECVAR_SYSFS, are brought as
dependency for IMA_ARCH_POLICY on PPC.

Signed-off-by: Bruno Meneguele <bmeneg@xxxxxxxxxx>
---
 redhat/configs/ark/generic/powerpc/CONFIG_IMA_ARCH_POLICY     | 1 +
 redhat/configs/ark/generic/powerpc/CONFIG_PPC_SECURE_BOOT     | 1 +
 redhat/configs/ark/generic/powerpc/CONFIG_PPC_SECVAR_SYSFS    | 1 +
 redhat/configs/ark/generic/x86/CONFIG_IMA_ARCH_POLICY         | 1 +
 redhat/configs/fedora/generic/powerpc/CONFIG_IMA_ARCH_POLICY  | 1 +
 redhat/configs/fedora/generic/powerpc/CONFIG_PPC_SECURE_BOOT  | 1 +
 redhat/configs/fedora/generic/powerpc/CONFIG_PPC_SECVAR_SYSFS | 1 +
 redhat/configs/fedora/generic/x86/CONFIG_IMA_ARCH_POLICY      | 1 +
 8 files changed, 8 insertions(+)
 create mode 100644 redhat/configs/ark/generic/powerpc/CONFIG_IMA_ARCH_POLICY
 create mode 100644 redhat/configs/ark/generic/powerpc/CONFIG_PPC_SECURE_BOOT
 create mode 100644 redhat/configs/ark/generic/powerpc/CONFIG_PPC_SECVAR_SYSFS
 create mode 100644 redhat/configs/ark/generic/x86/CONFIG_IMA_ARCH_POLICY
 create mode 100644 redhat/configs/fedora/generic/powerpc/CONFIG_IMA_ARCH_POLICY
 create mode 100644 redhat/configs/fedora/generic/powerpc/CONFIG_PPC_SECURE_BOOT
 create mode 100644 redhat/configs/fedora/generic/powerpc/CONFIG_PPC_SECVAR_SYSFS
 create mode 100644 redhat/configs/fedora/generic/x86/CONFIG_IMA_ARCH_POLICY

diff --git a/redhat/configs/ark/generic/powerpc/CONFIG_IMA_ARCH_POLICY b/redhat/configs/ark/generic/powerpc/CONFIG_IMA_ARCH_POLICY
new file mode 100644
index 000000000000..e0230b86d3d1
--- /dev/null
+++ b/redhat/configs/ark/generic/powerpc/CONFIG_IMA_ARCH_POLICY
@@ -0,0 +1 @@
+CONFIG_IMA_ARCH_POLICY=y
diff --git a/redhat/configs/ark/generic/powerpc/CONFIG_PPC_SECURE_BOOT b/redhat/configs/ark/generic/powerpc/CONFIG_PPC_SECURE_BOOT
new file mode 100644
index 000000000000..2ed7b7fa69a7
--- /dev/null
+++ b/redhat/configs/ark/generic/powerpc/CONFIG_PPC_SECURE_BOOT
@@ -0,0 +1 @@
+CONFIG_PPC_SECURE_BOOT=y
diff --git a/redhat/configs/ark/generic/powerpc/CONFIG_PPC_SECVAR_SYSFS b/redhat/configs/ark/generic/powerpc/CONFIG_PPC_SECVAR_SYSFS
new file mode 100644
index 000000000000..fea2a70fa63b
--- /dev/null
+++ b/redhat/configs/ark/generic/powerpc/CONFIG_PPC_SECVAR_SYSFS
@@ -0,0 +1 @@
+CONFIG_PPC_SECVAR_SYSFS=y
diff --git a/redhat/configs/ark/generic/x86/CONFIG_IMA_ARCH_POLICY b/redhat/configs/ark/generic/x86/CONFIG_IMA_ARCH_POLICY
new file mode 100644
index 000000000000..e0230b86d3d1
--- /dev/null
+++ b/redhat/configs/ark/generic/x86/CONFIG_IMA_ARCH_POLICY
@@ -0,0 +1 @@
+CONFIG_IMA_ARCH_POLICY=y
diff --git a/redhat/configs/fedora/generic/powerpc/CONFIG_IMA_ARCH_POLICY b/redhat/configs/fedora/generic/powerpc/CONFIG_IMA_ARCH_POLICY
new file mode 100644
index 000000000000..e0230b86d3d1
--- /dev/null
+++ b/redhat/configs/fedora/generic/powerpc/CONFIG_IMA_ARCH_POLICY
@@ -0,0 +1 @@
+CONFIG_IMA_ARCH_POLICY=y
diff --git a/redhat/configs/fedora/generic/powerpc/CONFIG_PPC_SECURE_BOOT b/redhat/configs/fedora/generic/powerpc/CONFIG_PPC_SECURE_BOOT
new file mode 100644
index 000000000000..2ed7b7fa69a7
--- /dev/null
+++ b/redhat/configs/fedora/generic/powerpc/CONFIG_PPC_SECURE_BOOT
@@ -0,0 +1 @@
+CONFIG_PPC_SECURE_BOOT=y
diff --git a/redhat/configs/fedora/generic/powerpc/CONFIG_PPC_SECVAR_SYSFS b/redhat/configs/fedora/generic/powerpc/CONFIG_PPC_SECVAR_SYSFS
new file mode 100644
index 000000000000..fea2a70fa63b
--- /dev/null
+++ b/redhat/configs/fedora/generic/powerpc/CONFIG_PPC_SECVAR_SYSFS
@@ -0,0 +1 @@
+CONFIG_PPC_SECVAR_SYSFS=y
diff --git a/redhat/configs/fedora/generic/x86/CONFIG_IMA_ARCH_POLICY b/redhat/configs/fedora/generic/x86/CONFIG_IMA_ARCH_POLICY
new file mode 100644
index 000000000000..e0230b86d3d1
--- /dev/null
+++ b/redhat/configs/fedora/generic/x86/CONFIG_IMA_ARCH_POLICY
@@ -0,0 +1 @@
+CONFIG_IMA_ARCH_POLICY=y
-- 
GitLab
_______________________________________________
kernel mailing list -- kernel@xxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe send an email to kernel-leave@xxxxxxxxxxxxxxxxxxxxxxx
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/kernel@xxxxxxxxxxxxxxxxxxxxxxx




[Index of Archives]     [Fedora General Discussion]     [Older Fedora Users Archive]     [Fedora Advisory Board]     [Fedora Security]     [Fedora Devel Java]     [Fedora Legacy]     [Fedora Desktop]     [ATA RAID]     [Fedora Marketing]     [Fedora Mentors]     [Fedora Package Announce]     [Fedora Package Review]     [Fedora Music]     [Fedora Packaging]     [Centos]     [Fedora SELinux]     [Coolkey]     [Yum Users]     [Tux]     [Yosemite News]     [KDE Users]     [Fedora Art]     [Fedora Docs]     [USB]     [Asterisk PBX]

  Powered by Linux