Re: [RFC PATCH v14 17/19] scripts: add boot policy generation program

[Randy Dunlap]

On 3/6/24 15:34, Fan Wu wrote:
>  if SECURITY_IPE
> +config IPE_BOOT_POLICY
> +     string "Integrity policy to apply on system startup"
> +     help
> +       This option specifies a filepath to a IPE policy that is compiled

                                              an IPE

> +       into the kernel. This policy will be enforced until a policy update
> +       is deployed via the $securityfs/ipe/policies/$policy_name/active
> +       interface.

-- 
#Randy