CONFIG_IMA_TRUSTED_KEYRING: Require all keys on the .ima keyring be signed (deprecated)

General informations

The Linux kernel configuration item CONFIG_IMA_TRUSTED_KEYRING has multiple definitions:

Require all keys on the .ima keyring be signed (deprecated) found in security/integrity/ima/Kconfig

The configuration item CONFIG_IMA_TRUSTED_KEYRING:

• prompt: Require all keys on the .ima keyring be signed (deprecated)
• type: bool
• depends on: ( CONFIG_IMA_APPRAISE && CONFIG_SYSTEM_TRUSTED_KEYRING ) && ( CONFIG_INTEGRITY_ASYMMETRIC_KEYS )
• defined in security/integrity/ima/Kconfig
• found in Linux kernels: 4.5–4.20, 5.0–5.19, 6.0–6.5

Help text

This option requires that all keys added to the .ima keyring be signed by a key on the system trusted keyring.

This option is deprecated in favor of INTEGRITY_TRUSTED_KEYRING

Require all keys on the .ima keyring be signed found in security/integrity/ima/Kconfig

The configuration item CONFIG_IMA_TRUSTED_KEYRING:

• prompt: Require all keys on the .ima keyring be signed
• type: bool
• depends on: ( CONFIG_IMA_APPRAISE && CONFIG_SYSTEM_TRUSTED_KEYRING ) && ( CONFIG_INTEGRITY_ASYMMETRIC_KEYS )
• defined in security/integrity/ima/Kconfig
• found in Linux kernels: 3.17–3.19, 4.0–4.4

Help text

This option requires that all keys added to the .ima keyring be signed by a key on the system trusted keyring.

Hardware

LKDDb

Raw data from LKDDb:

• (none)

Sources

This page is automaticly generated with free (libre, open) software lkddb(see lkddb-sources).

The data is retrived from:

• Linux kernel
• Linux Kernel Driver DataBase (LKDDb)

Automatic links from Google (and ads)

Custom Search

Popular queries: