lkml.org 
[lkml]   [2014]   [Mar]   [3]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
SubjectRe: [PATCH 6/8] evm: enable key retention service automatically
From
Date
On Fri, 2014-02-28 at 16:59 +0200, Dmitry Kasatkin wrote: 
> If keys are not enabled, EVM is not visible in the configuration menu.
> It may be difficult to figure out what to do unless you really know.
>
> Other subsystems as NFS, CIFS select keys automatically.
> This patch does the same.
>
> Signed-off-by: Dmitry Kasatkin <d.kasatkin@samsung.com>
> ---
> security/integrity/evm/Kconfig | 5 +++--
> 1 file changed, 3 insertions(+), 2 deletions(-)
>
> diff --git a/security/integrity/evm/Kconfig b/security/integrity/evm/Kconfig
> index 5aa9103..d35b491 100644
> --- a/security/integrity/evm/Kconfig
> +++ b/security/integrity/evm/Kconfig
> @@ -1,9 +1,10 @@
> config EVM
> boolean "EVM support"
> - depends on SECURITY && KEYS && (TRUSTED_KEYS=y || TRUSTED_KEYS=n)

Including KEYS is fine, but the trusted-keys dependency is still
required. If trusted-keys is enabled, then the TPM and trusted-keys
must be builtin.

Mimi

> + depends on SECURITY
> + select KEYS
> + select ENCRYPTED_KEYS
> select CRYPTO_HMAC
> select CRYPTO_SHA1
> - select ENCRYPTED_KEYS
> default n
> help
> EVM protects a file's security extended attributes against




\
 
 \ /
  Last update: 2014-03-04 03:41    [W:0.204 / U:1.412 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site