| CONFIG_KEYS=y |
| CONFIG_ASYMMETRIC_KEY_TYPE=y |
| CONFIG_SYSTEM_TRUSTED_KEYRING=y |
| CONFIG_SYSTEM_TRUSTED_KEYS="${IMA_EVM_ROOT_CA}" |
| CONFIG_SECONDARY_TRUSTED_KEYRING=y |
| CONFIG_ASYMMETRIC_PUBLIC_KEY_SUBTYPE=y |
| CONFIG_X509_CERTIFICATE_PARSER=y |
| CONFIG_PKCS8_PRIVATE_KEY_PARSER=y |
| CONFIG_CRYPTO_ECDSA=y |
| CONFIG_SECURITY=y |
| CONFIG_SECURITYFS=y |
| CONFIG_INTEGRITY=y |
| CONFIG_INTEGRITY_SIGNATURE=y |
| CONFIG_INTEGRITY_ASYMMETRIC_KEYS=y |
| CONFIG_INTEGRITY_TRUSTED_KEYRING=y |
| CONFIG_IMA=y |
| CONFIG_IMA_MEASURE_PCR_IDX=10 |
| CONFIG_IMA_LSM_RULES=y |
| # CONFIG_IMA_TEMPLATE is not set |
| # CONFIG_IMA_NG_TEMPLATE is not set |
| CONFIG_IMA_SIG_TEMPLATE=y |
| CONFIG_IMA_DEFAULT_TEMPLATE="ima-sig" |
| # CONFIG_IMA_DEFAULT_HASH_SHA1 is not set |
| CONFIG_IMA_DEFAULT_HASH_SHA256=y |
| # CONFIG_IMA_DEFAULT_HASH_SHA512 is not set |
| CONFIG_IMA_DEFAULT_HASH="sha256" |
| CONFIG_IMA_WRITE_POLICY=y |
| CONFIG_IMA_READ_POLICY=y |
| CONFIG_IMA_APPRAISE=y |
| CONFIG_IMA_ARCH_POLICY=y |
| CONFIG_IMA_APPRAISE_BUILD_POLICY=y |
| CONFIG_IMA_APPRAISE_REQUIRE_POLICY_SIGS=y |
| # CONFIG_IMA_APPRAISE_BOOTPARAM is not set |
| # CONFIG_IMA_APPRAISE_MODSIG is not set |
| CONFIG_IMA_TRUSTED_KEYRING=y |
| CONFIG_IMA_KEYRINGS_PERMIT_SIGNED_BY_BUILTIN_OR_SECONDARY=y |
| # CONFIG_IMA_BLACKLIST_KEYRING is not set |
| # CONFIG_IMA_LOAD_X509 is not set |
| CONFIG_IMA_APPRAISE_SIGNED_INIT=y |
| CONFIG_IMA_MEASURE_ASYMMETRIC_KEYS=y |
| CONFIG_IMA_QUEUE_EARLY_BOOT_KEYS=y |
| CONFIG_IMA_SECURE_AND_OR_TRUSTED_BOOT=y |
| # CONFIG_IMA_DISABLE_HTABLE is not set |
| CONFIG_EVM=y |
| # CONFIG_EVM_LOAD_X509 is not set |