tree 401456bf39349a3443fcb8d2ef676f7e012aeba2
parent a24eb9843bf0b0f8789042bbc00c464e914e727c
author Dave Heller <hellerda@us.ibm.com> 1465159196 -0400
committer Dave Heller <hellerda@us.ibm.com> 1465159196 -0400

Enable IMA in skiroot

This adds basic support for the Integrity Measurement Subsystem to the
skiroot kernel.

The changes to skiroot_defconfig are the kernel config options to enable IMA
and the basic security subsystem.  The values were obtained by running a make
menuconfig, enabling IMA and the Nuvoton TPM driver, running a make defconfig,
then updating skiroot_defconfig with this result.

The changes to /etc/fstab ensure securityfs is mounted at boot.

Signed-off-by: Dave Heller <hellerda@us.ibm.com>