Messages in this thread | | | Subject | Re: [PATCH 6/8] evm: enable key retention service automatically | From | Mimi Zohar <> | Date | Mon, 03 Mar 2014 21:02:16 -0500 |
| |
On Fri, 2014-02-28 at 16:59 +0200, Dmitry Kasatkin wrote: > If keys are not enabled, EVM is not visible in the configuration menu. > It may be difficult to figure out what to do unless you really know. > > Other subsystems as NFS, CIFS select keys automatically. > This patch does the same. > > Signed-off-by: Dmitry Kasatkin <d.kasatkin@samsung.com> > --- > security/integrity/evm/Kconfig | 5 +++-- > 1 file changed, 3 insertions(+), 2 deletions(-) > > diff --git a/security/integrity/evm/Kconfig b/security/integrity/evm/Kconfig > index 5aa9103..d35b491 100644 > --- a/security/integrity/evm/Kconfig > +++ b/security/integrity/evm/Kconfig > @@ -1,9 +1,10 @@ > config EVM > boolean "EVM support" > - depends on SECURITY && KEYS && (TRUSTED_KEYS=y || TRUSTED_KEYS=n)
Including KEYS is fine, but the trusted-keys dependency is still required. If trusted-keys is enabled, then the TPM and trusted-keys must be builtin.
Mimi
> + depends on SECURITY > + select KEYS > + select ENCRYPTED_KEYS > select CRYPTO_HMAC > select CRYPTO_SHA1 > - select ENCRYPTED_KEYS > default n > help > EVM protects a file's security extended attributes against
| |