From: Bruno Meneguele <bmeneg@xxxxxxxxxx> Upstream kernel supports specific architecture IMA policies and has been requested by IBM on RHEL. With that, enable it on ARK and Fedora too. Two another options: PPC_SECURE_BOOT and PPC_SECVAR_SYSFS, are brought as dependency for IMA_ARCH_POLICY on PPC. Signed-off-by: Bruno Meneguele <bmeneg@xxxxxxxxxx> --- redhat/configs/ark/generic/powerpc/CONFIG_IMA_ARCH_POLICY | 1 + redhat/configs/ark/generic/powerpc/CONFIG_PPC_SECURE_BOOT | 1 + redhat/configs/ark/generic/powerpc/CONFIG_PPC_SECVAR_SYSFS | 1 + redhat/configs/ark/generic/x86/CONFIG_IMA_ARCH_POLICY | 1 + redhat/configs/fedora/generic/powerpc/CONFIG_IMA_ARCH_POLICY | 1 + redhat/configs/fedora/generic/powerpc/CONFIG_PPC_SECURE_BOOT | 1 + redhat/configs/fedora/generic/powerpc/CONFIG_PPC_SECVAR_SYSFS | 1 + redhat/configs/fedora/generic/x86/CONFIG_IMA_ARCH_POLICY | 1 + 8 files changed, 8 insertions(+) create mode 100644 redhat/configs/ark/generic/powerpc/CONFIG_IMA_ARCH_POLICY create mode 100644 redhat/configs/ark/generic/powerpc/CONFIG_PPC_SECURE_BOOT create mode 100644 redhat/configs/ark/generic/powerpc/CONFIG_PPC_SECVAR_SYSFS create mode 100644 redhat/configs/ark/generic/x86/CONFIG_IMA_ARCH_POLICY create mode 100644 redhat/configs/fedora/generic/powerpc/CONFIG_IMA_ARCH_POLICY create mode 100644 redhat/configs/fedora/generic/powerpc/CONFIG_PPC_SECURE_BOOT create mode 100644 redhat/configs/fedora/generic/powerpc/CONFIG_PPC_SECVAR_SYSFS create mode 100644 redhat/configs/fedora/generic/x86/CONFIG_IMA_ARCH_POLICY diff --git a/redhat/configs/ark/generic/powerpc/CONFIG_IMA_ARCH_POLICY b/redhat/configs/ark/generic/powerpc/CONFIG_IMA_ARCH_POLICY new file mode 100644 index 000000000000..e0230b86d3d1 --- /dev/null +++ b/redhat/configs/ark/generic/powerpc/CONFIG_IMA_ARCH_POLICY @@ -0,0 +1 @@ +CONFIG_IMA_ARCH_POLICY=y diff --git a/redhat/configs/ark/generic/powerpc/CONFIG_PPC_SECURE_BOOT b/redhat/configs/ark/generic/powerpc/CONFIG_PPC_SECURE_BOOT new file mode 100644 index 000000000000..2ed7b7fa69a7 --- /dev/null +++ b/redhat/configs/ark/generic/powerpc/CONFIG_PPC_SECURE_BOOT @@ -0,0 +1 @@ +CONFIG_PPC_SECURE_BOOT=y diff --git a/redhat/configs/ark/generic/powerpc/CONFIG_PPC_SECVAR_SYSFS b/redhat/configs/ark/generic/powerpc/CONFIG_PPC_SECVAR_SYSFS new file mode 100644 index 000000000000..fea2a70fa63b --- /dev/null +++ b/redhat/configs/ark/generic/powerpc/CONFIG_PPC_SECVAR_SYSFS @@ -0,0 +1 @@ +CONFIG_PPC_SECVAR_SYSFS=y diff --git a/redhat/configs/ark/generic/x86/CONFIG_IMA_ARCH_POLICY b/redhat/configs/ark/generic/x86/CONFIG_IMA_ARCH_POLICY new file mode 100644 index 000000000000..e0230b86d3d1 --- /dev/null +++ b/redhat/configs/ark/generic/x86/CONFIG_IMA_ARCH_POLICY @@ -0,0 +1 @@ +CONFIG_IMA_ARCH_POLICY=y diff --git a/redhat/configs/fedora/generic/powerpc/CONFIG_IMA_ARCH_POLICY b/redhat/configs/fedora/generic/powerpc/CONFIG_IMA_ARCH_POLICY new file mode 100644 index 000000000000..e0230b86d3d1 --- /dev/null +++ b/redhat/configs/fedora/generic/powerpc/CONFIG_IMA_ARCH_POLICY @@ -0,0 +1 @@ +CONFIG_IMA_ARCH_POLICY=y diff --git a/redhat/configs/fedora/generic/powerpc/CONFIG_PPC_SECURE_BOOT b/redhat/configs/fedora/generic/powerpc/CONFIG_PPC_SECURE_BOOT new file mode 100644 index 000000000000..2ed7b7fa69a7 --- /dev/null +++ b/redhat/configs/fedora/generic/powerpc/CONFIG_PPC_SECURE_BOOT @@ -0,0 +1 @@ +CONFIG_PPC_SECURE_BOOT=y diff --git a/redhat/configs/fedora/generic/powerpc/CONFIG_PPC_SECVAR_SYSFS b/redhat/configs/fedora/generic/powerpc/CONFIG_PPC_SECVAR_SYSFS new file mode 100644 index 000000000000..fea2a70fa63b --- /dev/null +++ b/redhat/configs/fedora/generic/powerpc/CONFIG_PPC_SECVAR_SYSFS @@ -0,0 +1 @@ +CONFIG_PPC_SECVAR_SYSFS=y diff --git a/redhat/configs/fedora/generic/x86/CONFIG_IMA_ARCH_POLICY b/redhat/configs/fedora/generic/x86/CONFIG_IMA_ARCH_POLICY new file mode 100644 index 000000000000..e0230b86d3d1 --- /dev/null +++ b/redhat/configs/fedora/generic/x86/CONFIG_IMA_ARCH_POLICY @@ -0,0 +1 @@ +CONFIG_IMA_ARCH_POLICY=y -- GitLab _______________________________________________ kernel mailing list -- kernel@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to kernel-leave@xxxxxxxxxxxxxxxxxxxxxxx Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/kernel@xxxxxxxxxxxxxxxxxxxxxxx
