@@ -7143,7 +7143,7 @@ CONFIG_KEXEC policy<{'amd64': 'y', 'arm64': '
CONFIG_KEXEC_CORE policy<{'amd64': 'y', 'arm64': 'y', 'armhf': 'y', 'ppc64el': 'y', 'riscv64': 'y', 's390x': 'y'}>
CONFIG_KEXEC_ELF policy<{'ppc64el': 'y', 'riscv64': 'y'}>
CONFIG_KEXEC_FILE policy<{'amd64': 'y', 'arm64': 'y', 'ppc64el': 'y', 'riscv64': 'y', 's390x': 'y'}>
-CONFIG_KEXEC_IMAGE_VERIFY_SIG policy<{'arm64': 'n'}>
+CONFIG_KEXEC_IMAGE_VERIFY_SIG policy<{'arm64': 'y'}>
CONFIG_KEXEC_JUMP policy<{'amd64': 'y'}>
CONFIG_KEXEC_SIG policy<{'amd64': 'y', 'arm64': 'y', 's390x': 'y'}>
CONFIG_KEXEC_SIG_FORCE policy<{'amd64': 'n'}>
BugLink: https://bugs.launchpad.net/bugs/2033007 This option enables support for kexec image signature verification, allowing signed kernels to be loaded via the kexec_file_load system call. Signed-off-by: Kevin Becker <kevin.becker@canonical.com> --- debian.master/config/annotations | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-)