CONFIG_FS_VERITY_BUILTIN_SIGNATURES: FS Verity builtin signature support

General informations

The Linux kernel configuration item CONFIG_FS_VERITY_BUILTIN_SIGNATURES:

• prompt: FS Verity builtin signature support
• type: bool
• depends on: CONFIG_FS_VERITY
• defined in fs/verity/Kconfig
• found in Linux kernels: 5.4–5.19, 6.0–6.3, 6.4-rc+HEAD

Help text

Support verifying signatures of verity files against the X.509 certificates that have been loaded into the ".fs-verity" kernel keyring.

This is meant as a relatively simple mechanism that can be used to provide an authenticity guarantee for verity files, as an alternative to IMA appraisal. Userspace programs still need to check that the verity bit is set in order to get an authenticity guarantee.

If unsure, say N.

Hardware

LKDDb

Raw data from LKDDb:

• (none)

Sources

This page is automaticly generated with free (libre, open) software lkddb(see lkddb-sources).

The data is retrived from:

• Linux kernel
• Linux Kernel Driver DataBase (LKDDb)

Automatic links from Google (and ads)

Custom Search

Popular queries: