The kernel test robot reports when building with Kconfig
CONFIG_INTEGRITY_PLATFORM_KEYRING defined and
CONFIG_SYSTEM_DATA_VERIFICATION undefined:
ld.lld: error: undefined symbol: pkcs7_validate_trust
referenced by blacklist.c:128 (certs/blacklist.c:128)
blacklist.o:(is_key_on_revocation_list) in archive certs/built-in.a
Make CONFIG_SYSTEM_DATA_VERIFICATION a dependency for validate_trust.
Reported-by: kernel test robot <l...@intel.com>
Signed-off-by: Eric Snowberg <eric.snowb...@oracle.com>
---
certs/blacklist.h | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/certs/blacklist.h b/certs/blacklist.h
index 420bb7c86e07..a86f0b52a033 100644
--- a/certs/blacklist.h
+++ b/certs/blacklist.h
@@ -4,7 +4,7 @@
extern const char __initconst *const blacklist_hashes[];
-#ifdef CONFIG_INTEGRITY_PLATFORM_KEYRING
+#if defined(CONFIG_INTEGRITY_PLATFORM_KEYRING) &&
defined(SYSTEM_DATA_VERIFICATION)
#define validate_trust pkcs7_validate_trust
#else
static inline int validate_trust(struct pkcs7_message *pkcs7,
--
2.18.4
