Commit 1ae8f41c authored by Dmitry Kasatkin's avatar Dmitry Kasatkin Committed by Mimi Zohar
Browse files

integrity: move asymmetric keys config option 



For better visual appearance it is better to co-locate
asymmetric key options together with signature support.

Signed-off-by: default avatarDmitry Kasatkin <d.kasatkin@samsung.com>
Signed-off-by: default avatarMimi Zohar <zohar@linux.vnet.ibm.com>
parent b4148db5

security/integrity/Kconfig

+12 −12
Original line number Diff line number Diff line
@@ -17,6 +17,18 @@ config INTEGRITY_SIGNATURE 
	  This is useful for evm and module keyrings, when keys are

	  usually only added from initramfs.



config INTEGRITY_ASYMMETRIC_KEYS

	boolean "Enable asymmetric keys support"

	depends on INTEGRITY_SIGNATURE

	default n

        select ASYMMETRIC_KEY_TYPE

        select ASYMMETRIC_PUBLIC_KEY_SUBTYPE

        select PUBLIC_KEY_ALGO_RSA

        select X509_CERTIFICATE_PARSER

	help

	  This option enables digital signature verification using

	  asymmetric keys.



config INTEGRITY_AUDIT

	bool "Enables integrity auditing support "

	depends on INTEGRITY && AUDIT
@@ -32,17 +44,5 @@ config INTEGRITY_AUDIT 
	  be enabled by specifying 'integrity_audit=1' on the kernel

	  command line.



config INTEGRITY_ASYMMETRIC_KEYS

	boolean "Enable asymmetric keys support"

	depends on INTEGRITY_SIGNATURE

	default n

        select ASYMMETRIC_KEY_TYPE

        select ASYMMETRIC_PUBLIC_KEY_SUBTYPE

        select PUBLIC_KEY_ALGO_RSA

        select X509_CERTIFICATE_PARSER

	help

	  This option enables digital signature verification using

	  asymmetric keys.



source security/integrity/ima/Kconfig

source security/integrity/evm/Kconfig