Skip to content

Commit be210c6

Browse files
gonzouamimizohar
authored andcommitted
ima: Finish deprecation of IMA_TRUSTED_KEYRING Kconfig
The removal of IMA_TRUSTED_KEYRING made IMA_LOAD_X509 and IMA_BLACKLIST_KEYRING unavailable because the latter two depend on the former. Since IMA_TRUSTED_KEYRING was deprecated in favor of INTEGRITY_TRUSTED_KEYRING use it as a dependency for the two Kconfigs affected by the deprecation. Fixes: 5087fd9 ("ima: Remove deprecated IMA_TRUSTED_KEYRING Kconfig") Signed-off-by: Oleksandr Tymoshenko <ovt@google.com> Reviewed-by: Nayna Jain <nayna@linux.ibm.com> Signed-off-by: Mimi Zohar <zohar@linux.ibm.com>
1 parent 6465e26 commit be210c6

File tree

1 file changed

+2
-2
lines changed

1 file changed

+2
-2
lines changed

security/integrity/ima/Kconfig

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -269,7 +269,7 @@ config IMA_KEYRINGS_PERMIT_SIGNED_BY_BUILTIN_OR_SECONDARY
269269
config IMA_BLACKLIST_KEYRING
270270
bool "Create IMA machine owner blacklist keyrings (EXPERIMENTAL)"
271271
depends on SYSTEM_TRUSTED_KEYRING
272-
depends on IMA_TRUSTED_KEYRING
272+
depends on INTEGRITY_TRUSTED_KEYRING
273273
default n
274274
help
275275
This option creates an IMA blacklist keyring, which contains all
@@ -279,7 +279,7 @@ config IMA_BLACKLIST_KEYRING
279279

280280
config IMA_LOAD_X509
281281
bool "Load X509 certificate onto the '.ima' trusted keyring"
282-
depends on IMA_TRUSTED_KEYRING
282+
depends on INTEGRITY_TRUSTED_KEYRING
283283
default n
284284
help
285285
File signature verification is based on the public keys

0 commit comments

Comments
 (0)