diff mbox series

[SRU,N,1/1] UBUNTU: [Config]: Enable CONFIG_KEXEC_IMAGE_VERIFY_SIG on arm64

Message ID 20240716202914.1927239-2-kevin.becker@canonical.com
State New
Headers show
Series UBUNTU: [Config]: Enable CONFIG_KEXEC_IMAGE_VERIFY_SIG on arm64 | expand

Commit Message

Kevin Becker July 16, 2024, 8:29 p.m. UTC 
BugLink: https://bugs.launchpad.net/bugs/2033007

This option enables support for kexec image signature verification,
allowing signed kernels to be loaded via the kexec_file_load system
call.

Signed-off-by: Kevin Becker <kevin.becker@canonical.com>
---
 debian.master/config/annotations | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)
diff mbox series

Patch

diff --git a/debian.master/config/annotations b/debian.master/config/annotations
index 6ea4ce0b800a..e9996de90c8d 100644
--- a/debian.master/config/annotations
+++ b/debian.master/config/annotations
@@ -7143,7 +7143,7 @@  CONFIG_KEXEC                                    policy<{'amd64': 'y', 'arm64': '
 CONFIG_KEXEC_CORE                               policy<{'amd64': 'y', 'arm64': 'y', 'armhf': 'y', 'ppc64el': 'y', 'riscv64': 'y', 's390x': 'y'}>
 CONFIG_KEXEC_ELF                                policy<{'ppc64el': 'y', 'riscv64': 'y'}>
 CONFIG_KEXEC_FILE                               policy<{'amd64': 'y', 'arm64': 'y', 'ppc64el': 'y', 'riscv64': 'y', 's390x': 'y'}>
-CONFIG_KEXEC_IMAGE_VERIFY_SIG                   policy<{'arm64': 'n'}>
+CONFIG_KEXEC_IMAGE_VERIFY_SIG                   policy<{'arm64': 'y'}>
 CONFIG_KEXEC_JUMP                               policy<{'amd64': 'y'}>
 CONFIG_KEXEC_SIG                                policy<{'amd64': 'y', 'arm64': 'y', 's390x': 'y'}>
 CONFIG_KEXEC_SIG_FORCE                          policy<{'amd64': 'n'}>