From: Bruno Meneguele on gitlab.com Merge Request: https://gitlab.com/cki-project/kernel-ark/-/merge_requests/1166 The config options being enable here are some that I missed in previous MRs that I opened re-working the IMA overall state across all ARK supported arches. All options were already enabled in one or more arches in RHEL-8, so enabling it in ARK are safe. Signed-off-by: Bruno Meneguele <bmeneg@xxxxxxxxxx> c30e184b2b98 (Bruno Meneguele) redhat/configs: enable IMA_KEXEC for supported arches aab410e1a8dc (Bruno Meneguele) redhat/configs: enable INTEGRITY_SIGNATURE to all arches redhat/configs/ark/generic/CONFIG_IMA_KEXEC | 1 - redhat/configs/ark/generic/CONFIG_INTEGRITY_SIGNATURE | 1 - redhat/configs/ark/generic/x86/x86_64/CONFIG_IMA_APPRAISE_BUILD_POLICY | 1 - redhat/configs/ark/generic/x86/x86_64/CONFIG_INTEGRITY_SIGNATURE | 1 - .../generic/powerpc => common/generic}/CONFIG_IMA_APPRAISE_BUILD_POLICY | 0 redhat/configs/{fedora => common}/generic/CONFIG_IMA_KEXEC | 0 .../{ark/generic/powerpc => common/generic}/CONFIG_INTEGRITY_SIGNATURE | 0 redhat/configs/fedora/generic/CONFIG_IMA_APPRAISE_BUILD_POLICY | 1 - redhat/configs/fedora/generic/CONFIG_INTEGRITY_SIGNATURE | 1 - 9 files changed, 6 deletions(-) _______________________________________________ kernel mailing list -- kernel@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to kernel-leave@xxxxxxxxxxxxxxxxxxxxxxx Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/kernel@xxxxxxxxxxxxxxxxxxxxxxx Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure