On 3/6/24 15:34, Fan Wu wrote: > if SECURITY_IPE > +config IPE_BOOT_POLICY > + string "Integrity policy to apply on system startup" > + help > + This option specifies a filepath to a IPE policy that is compiled an IPE > + into the kernel. This policy will be enforced until a policy update > + is deployed via the $securityfs/ipe/policies/$policy_name/active > + interface. -- #Randy
