NTU <neotheuser@xxxxxxxxx> wrote: > Currently FIPS depends on MODULE_SIG, even if MODULES is disabled. > This change allows the enabling of FIPS without support for modules. > > If module loading support is enabled, only then does > FIPS require MODULE_SIG. > > Signed-off-by: Alec Ari <neotheuser@xxxxxxxxx> > --- > crypto/Kconfig | 2 +- > 1 file changed, 1 insertion(+), 1 deletion(-) > > diff --git a/crypto/Kconfig b/crypto/Kconfig > index 84d7148..fd28805 100644 > --- a/crypto/Kconfig > +++ b/crypto/Kconfig > @@ -24,7 +24,7 @@ comment "Crypto core or helper" > config CRYPTO_FIPS > bool "FIPS 200 compliance" > depends on (CRYPTO_ANSI_CPRNG || CRYPTO_DRBG) && > !CRYPTO_MANAGER_DISABLE_TESTS > - depends on MODULE_SIG > + depends on (MODULE_SIG || !MODULES) > help > This options enables the fips boot option which is > required if you want to system to operate in a FIPS 200 Your email has turned tabs into white spaces. Please fix it and resubmit. Thanks, -- Email: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx> Home Page: http://gondor.apana.org.au/~herbert/ PGP Key: http://gondor.apana.org.au/~herbert/pubkey.txt -- To unsubscribe from this list: send the line "unsubscribe linux-crypto" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
