[Fedora 00/19] kernel: Enable Kdump with secureboot/secure modules

Vivek Goyal vgoyal at redhat.com
Wed Sep 4 21:44:26 UTC 2013


Following are config file changes to enable this feature.


>From ca23231e0b79c7db4b776a16a276215443a6a499 Mon Sep 17 00:00:00 2001
From: Vivek Goyal <vgoyal at redhat.com>
Date: Wed, 4 Sep 2013 17:35:54 -0400
Subject: [PATCH 1/1] config: config file changes for enabling elf binary
 signature verification

Enable elf binary signature verification in fedora kernel.

Signed-off-by: Vivek Goyal <vgoyal at redhat.com>
---
 config-generic     | 2 ++
 config-x86-generic | 2 ++
 2 files changed, 4 insertions(+)

diff --git a/config-generic b/config-generic
index 0acca31..9ab3532 100644
--- a/config-generic
+++ b/config-generic
@@ -4851,3 +4851,5 @@ CONFIG_FMC_CHARDEV=m
 # CONFIG_CRYPTO_KEY_TYPE is not set
 # CONFIG_PGP_LIBRARY is not set
 # CONFIG_PGP_PRELOAD is not set
+# CONFIG_BINFMT_ELF_SIG is not set
+# CONFIG_INTEGRITY_AUDIT is not set
diff --git a/config-x86-generic b/config-x86-generic
index 3c3a0dd..d115b81 100644
--- a/config-x86-generic
+++ b/config-x86-generic
@@ -455,3 +455,5 @@ CONFIG_MODULE_SIG_UEFI=y
 
 CONFIG_VMXNET3=m
 CONFIG_VFIO_PCI_VGA=y
+
+CONFIG_BINFMT_ELF_SIG=y
-- 
1.8.3.1



More information about the kernel mailing list