From: Bruno Meneguele <bmeneg(a)redhat.com>
Upstream kernel supports specific architecture IMA policies and has been
requested by IBM on RHEL. With that, enable it on ARK and Fedora too.
Two another options: PPC_SECURE_BOOT and PPC_SECVAR_SYSFS, are brought as
dependency for IMA_ARCH_POLICY on PPC.
Signed-off-by: Bruno Meneguele <bmeneg(a)redhat.com>
---
redhat/configs/ark/generic/powerpc/CONFIG_IMA_ARCH_POLICY | 1 +
redhat/configs/ark/generic/powerpc/CONFIG_PPC_SECURE_BOOT | 1 +
redhat/configs/ark/generic/powerpc/CONFIG_PPC_SECVAR_SYSFS | 1 +
redhat/configs/ark/generic/x86/CONFIG_IMA_ARCH_POLICY | 1 +
redhat/configs/fedora/generic/powerpc/CONFIG_IMA_ARCH_POLICY | 1 +
redhat/configs/fedora/generic/powerpc/CONFIG_PPC_SECURE_BOOT | 1 +
redhat/configs/fedora/generic/powerpc/CONFIG_PPC_SECVAR_SYSFS | 1 +
redhat/configs/fedora/generic/x86/CONFIG_IMA_ARCH_POLICY | 1 +
8 files changed, 8 insertions(+)
create mode 100644 redhat/configs/ark/generic/powerpc/CONFIG_IMA_ARCH_POLICY
create mode 100644 redhat/configs/ark/generic/powerpc/CONFIG_PPC_SECURE_BOOT
create mode 100644 redhat/configs/ark/generic/powerpc/CONFIG_PPC_SECVAR_SYSFS
create mode 100644 redhat/configs/ark/generic/x86/CONFIG_IMA_ARCH_POLICY
create mode 100644 redhat/configs/fedora/generic/powerpc/CONFIG_IMA_ARCH_POLICY
create mode 100644 redhat/configs/fedora/generic/powerpc/CONFIG_PPC_SECURE_BOOT
create mode 100644 redhat/configs/fedora/generic/powerpc/CONFIG_PPC_SECVAR_SYSFS
create mode 100644 redhat/configs/fedora/generic/x86/CONFIG_IMA_ARCH_POLICY
diff --git a/redhat/configs/ark/generic/powerpc/CONFIG_IMA_ARCH_POLICY
b/redhat/configs/ark/generic/powerpc/CONFIG_IMA_ARCH_POLICY
new file mode 100644
index 000000000000..e0230b86d3d1
--- /dev/null
+++ b/redhat/configs/ark/generic/powerpc/CONFIG_IMA_ARCH_POLICY
@@ -0,0 +1 @@
+CONFIG_IMA_ARCH_POLICY=y
diff --git a/redhat/configs/ark/generic/powerpc/CONFIG_PPC_SECURE_BOOT
b/redhat/configs/ark/generic/powerpc/CONFIG_PPC_SECURE_BOOT
new file mode 100644
index 000000000000..2ed7b7fa69a7
--- /dev/null
+++ b/redhat/configs/ark/generic/powerpc/CONFIG_PPC_SECURE_BOOT
@@ -0,0 +1 @@
+CONFIG_PPC_SECURE_BOOT=y
diff --git a/redhat/configs/ark/generic/powerpc/CONFIG_PPC_SECVAR_SYSFS
b/redhat/configs/ark/generic/powerpc/CONFIG_PPC_SECVAR_SYSFS
new file mode 100644
index 000000000000..fea2a70fa63b
--- /dev/null
+++ b/redhat/configs/ark/generic/powerpc/CONFIG_PPC_SECVAR_SYSFS
@@ -0,0 +1 @@
+CONFIG_PPC_SECVAR_SYSFS=y
diff --git a/redhat/configs/ark/generic/x86/CONFIG_IMA_ARCH_POLICY
b/redhat/configs/ark/generic/x86/CONFIG_IMA_ARCH_POLICY
new file mode 100644
index 000000000000..e0230b86d3d1
--- /dev/null
+++ b/redhat/configs/ark/generic/x86/CONFIG_IMA_ARCH_POLICY
@@ -0,0 +1 @@
+CONFIG_IMA_ARCH_POLICY=y
diff --git a/redhat/configs/fedora/generic/powerpc/CONFIG_IMA_ARCH_POLICY
b/redhat/configs/fedora/generic/powerpc/CONFIG_IMA_ARCH_POLICY
new file mode 100644
index 000000000000..e0230b86d3d1
--- /dev/null
+++ b/redhat/configs/fedora/generic/powerpc/CONFIG_IMA_ARCH_POLICY
@@ -0,0 +1 @@
+CONFIG_IMA_ARCH_POLICY=y
diff --git a/redhat/configs/fedora/generic/powerpc/CONFIG_PPC_SECURE_BOOT
b/redhat/configs/fedora/generic/powerpc/CONFIG_PPC_SECURE_BOOT
new file mode 100644
index 000000000000..2ed7b7fa69a7
--- /dev/null
+++ b/redhat/configs/fedora/generic/powerpc/CONFIG_PPC_SECURE_BOOT
@@ -0,0 +1 @@
+CONFIG_PPC_SECURE_BOOT=y
diff --git a/redhat/configs/fedora/generic/powerpc/CONFIG_PPC_SECVAR_SYSFS
b/redhat/configs/fedora/generic/powerpc/CONFIG_PPC_SECVAR_SYSFS
new file mode 100644
index 000000000000..fea2a70fa63b
--- /dev/null
+++ b/redhat/configs/fedora/generic/powerpc/CONFIG_PPC_SECVAR_SYSFS
@@ -0,0 +1 @@
+CONFIG_PPC_SECVAR_SYSFS=y
diff --git a/redhat/configs/fedora/generic/x86/CONFIG_IMA_ARCH_POLICY
b/redhat/configs/fedora/generic/x86/CONFIG_IMA_ARCH_POLICY
new file mode 100644
index 000000000000..e0230b86d3d1
--- /dev/null
+++ b/redhat/configs/fedora/generic/x86/CONFIG_IMA_ARCH_POLICY
@@ -0,0 +1 @@
+CONFIG_IMA_ARCH_POLICY=y
--
GitLab