On Thu, 2018-01-18 at 13:07 -0800, Hugh Dickins wrote: > Perhaps you did not try on a system without SYSTEM_DATA_VERIFICATION > already enabled - that "select SYSTEM_DATA_VERIFICATION" seems to be > taking effect even when CFG80211_REQUIRE_SIGNED_REGDB is not enabled, > and pulls in a boatload. I kinda know actually. > In fact, I cannot even build the resulting config, without scurrying > around to update userspace with stuff I never needed before: > > HOSTCC scripts/extract-cert > scripts/extract-cert.c:21:25: fatal error: openssl/bio.h: No such file or directory Fun. I think the only thing we can do is make REGDB_AS_FW a (new) Kconfig option that you can then turn off. johannes