CONFIG_IMA=y | |
CONFIG_IMA_MEASURE_PCR_IDX=10 | |
CONFIG_IMA_NG_TEMPLATE=y | |
CONFIG_IMA_DEFAULT_TEMPLATE="ima-ng" | |
CONFIG_IMA_DEFAULT_HASH_SHA1=y | |
CONFIG_IMA_DEFAULT_HASH="sha1" | |
CONFIG_IMA_APPRAISE=y | |
CONFIG_IMA_APPRAISE_BOOTPARAM=y | |
CONFIG_IMA_TRUSTED_KEYRING=y | |
CONFIG_SIGNATURE=y | |
CONFIG_IMA_WRITE_POLICY=y | |
CONFIG_IMA_READ_POLICY=y | |
CONFIG_IMA_LOAD_X509=y | |
CONFIG_IMA_X509_PATH="/etc/keys/x509_ima.der" | |
#CONFIG_INTEGRITY_SIGNATURE=y | |
#CONFIG_INTEGRITY_ASYMMETRIC_KEYS=y | |
#CONFIG_INTEGRITY_TRUSTED_KEYRING=y |