Public bug reported:
---Problem Description---
Some krnel config options for IMA should not be enabled in the Ubuntu 17.04
kernel as they are at best experimental and at worst dangerous:
CONFIG_IMA_APPRAISE_SIGNED_INIT
CONFIG_IMA_BLACKLIST_KEYRING
CONFIG_IMA_KEYRINGS_PERMIT_SIGNED_BY_BUILTIN_OR_SECONDARY
CONFIG_IIMA_READ_POLICY
CONFIG_IIMA_WRITE_POLICY
Please disable these config options in the Ubuntu 17.04 kernel config.
---uname output---
Linux briggs-rtp-2 4.9.0-15-generic #16-Ubuntu SMP Fri Jan 20 15:28:49 UTC 2017
ppc64le ppc64le ppc64le GNU/Linux
Machine Type = S822LC 8001-22C
** Affects: linux (Ubuntu)
Importance: Undecided
Assignee: Taco Screen team (taco-screen-team)
Status: New
** Tags: architecture-ppc64le bugnameltc-151978 severity-critical
targetmilestone-inin1704
** Tags added: architecture-ppc64le bugnameltc-151978 severity-critical
targetmilestone-inin1704
** Changed in: ubuntu
Assignee: (unassigned) => Taco Screen team (taco-screen-team)
** Package changed: ubuntu => linux (Ubuntu)
--
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.
https://bugs.launchpad.net/bugs/1667490
Title:
Please disable unnecessary config options in the Ubuntu 17.04 kernel
config
Status in linux package in Ubuntu:
New
Bug description:
---Problem Description---
Some krnel config options for IMA should not be enabled in the Ubuntu 17.04
kernel as they are at best experimental and at worst dangerous:
CONFIG_IMA_APPRAISE_SIGNED_INIT
CONFIG_IMA_BLACKLIST_KEYRING
CONFIG_IMA_KEYRINGS_PERMIT_SIGNED_BY_BUILTIN_OR_SECONDARY
CONFIG_IIMA_READ_POLICY
CONFIG_IIMA_WRITE_POLICY
Please disable these config options in the Ubuntu 17.04 kernel config.
---uname output---
Linux briggs-rtp-2 4.9.0-15-generic #16-Ubuntu SMP Fri Jan 20 15:28:49 UTC
2017 ppc64le ppc64le ppc64le GNU/Linux
Machine Type = S822LC 8001-22C
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1667490/+subscriptions
--
Mailing list: https://launchpad.net/~kernel-packages
Post to : kernel-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~kernel-packages
More help : https://help.launchpad.net/ListHelp
