diff options
Diffstat (limited to 'meta-integrity/recipes-kernel/linux/linux')
4 files changed, 0 insertions, 30 deletions
diff --git a/meta-integrity/recipes-kernel/linux/linux/ima.cfg b/meta-integrity/recipes-kernel/linux/linux/ima.cfg deleted file mode 100644 index b3e47ba..0000000 --- a/meta-integrity/recipes-kernel/linux/linux/ima.cfg +++ /dev/null | |||
@@ -1,18 +0,0 @@ | |||
1 | CONFIG_IMA=y | ||
2 | CONFIG_IMA_MEASURE_PCR_IDX=10 | ||
3 | CONFIG_IMA_NG_TEMPLATE=y | ||
4 | CONFIG_IMA_DEFAULT_TEMPLATE="ima-ng" | ||
5 | CONFIG_IMA_DEFAULT_HASH_SHA1=y | ||
6 | CONFIG_IMA_DEFAULT_HASH="sha1" | ||
7 | CONFIG_IMA_APPRAISE=y | ||
8 | CONFIG_IMA_APPRAISE_BOOTPARAM=y | ||
9 | CONFIG_IMA_TRUSTED_KEYRING=y | ||
10 | CONFIG_SIGNATURE=y | ||
11 | CONFIG_IMA_WRITE_POLICY=y | ||
12 | CONFIG_IMA_READ_POLICY=y | ||
13 | CONFIG_IMA_LOAD_X509=y | ||
14 | CONFIG_IMA_X509_PATH="/etc/keys/x509_ima.der" | ||
15 | |||
16 | #CONFIG_INTEGRITY_SIGNATURE=y | ||
17 | #CONFIG_INTEGRITY_ASYMMETRIC_KEYS=y | ||
18 | #CONFIG_INTEGRITY_TRUSTED_KEYRING=y | ||
diff --git a/meta-integrity/recipes-kernel/linux/linux/ima_evm_root_ca.cfg b/meta-integrity/recipes-kernel/linux/linux/ima_evm_root_ca.cfg deleted file mode 100644 index 9a45425..0000000 --- a/meta-integrity/recipes-kernel/linux/linux/ima_evm_root_ca.cfg +++ /dev/null | |||
@@ -1,3 +0,0 @@ | |||
1 | # CONFIG_IMA_APPRAISE_SIGNED_INIT is not set | ||
2 | CONFIG_EVM_LOAD_X509=y | ||
3 | CONFIG_EVM_X509_PATH="/etc/keys/x509_evm.der" | ||
diff --git a/meta-integrity/recipes-kernel/linux/linux/modsign.cfg b/meta-integrity/recipes-kernel/linux/linux/modsign.cfg deleted file mode 100644 index c0c4ebc..0000000 --- a/meta-integrity/recipes-kernel/linux/linux/modsign.cfg +++ /dev/null | |||
@@ -1,5 +0,0 @@ | |||
1 | CONFIG_MODULE_SIG=y | ||
2 | CONFIG_MODULE_SIG_FORCE=y | ||
3 | CONFIG_MODULE_SIG_SHA256=y | ||
4 | CONFIG_MODULE_SIG_HASH="sha256" | ||
5 | CONFIG_MODULE_SIG_KEY="modsign_key.pem" | ||
diff --git a/meta-integrity/recipes-kernel/linux/linux/modsign.scc b/meta-integrity/recipes-kernel/linux/linux/modsign.scc deleted file mode 100644 index bce78ae..0000000 --- a/meta-integrity/recipes-kernel/linux/linux/modsign.scc +++ /dev/null | |||
@@ -1,4 +0,0 @@ | |||
1 | define KFEATURE_DESCRIPTION "Kernel Module Signing (modsign) enablement" | ||
2 | define KFEATURE_COMPATIBILITY all | ||
3 | |||
4 | kconf non-hardware modsign.cfg | ||