From: Coiby Xu <c...@redhat.com>

redhat/configs: enable KEXEC_SIG for aarch64 RHEL

Bugzilla: https://bugzilla.redhat.com/show_bug.cgi?id=1994858

KEXEC_SIG needs to enabled for aarch64 so the kernel image's signature
can be verified when loading a kernel image via kexec with secureboot
enabled. Note this option has already been enabled for aarch64 Fedora.

CONFIG_KEXEC_IMAGE_VERIFY_SIG is enabled as well so kernel image
signature verification support could be enabled for aarch64.

Signed-off-by: Coiby Xu <c...@redhat.com>

diff --git a/redhat/configs/fedora/generic/CONFIG_KEXEC_IMAGE_VERIFY_SIG 
b/redhat/configs/common/generic/CONFIG_KEXEC_IMAGE_VERIFY_SIG
rename from redhat/configs/fedora/generic/CONFIG_KEXEC_IMAGE_VERIFY_SIG
rename to redhat/configs/common/generic/CONFIG_KEXEC_IMAGE_VERIFY_SIG
index blahblah..blahblah 100644
--- a/redhat/configs/fedora/generic/CONFIG_KEXEC_IMAGE_VERIFY_SIG
+++ b/redhat/configs/common/generic/CONFIG_KEXEC_IMAGE_VERIFY_SIG
diff --git a/redhat/configs/fedora/generic/arm/aarch64/CONFIG_KEXEC_SIG 
b/redhat/configs/common/generic/arm/aarch64/CONFIG_KEXEC_SIG
rename from redhat/configs/fedora/generic/arm/aarch64/CONFIG_KEXEC_SIG
rename to redhat/configs/common/generic/arm/aarch64/CONFIG_KEXEC_SIG
index blahblah..blahblah 100644
--- a/redhat/configs/fedora/generic/arm/aarch64/CONFIG_KEXEC_SIG
+++ b/redhat/configs/common/generic/arm/aarch64/CONFIG_KEXEC_SIG

--
https://gitlab.com/cki-project/kernel-ark/-/merge_requests/1442
_______________________________________________
kernel mailing list -- kernel@lists.fedoraproject.org
To unsubscribe send an email to kernel-le...@lists.fedoraproject.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/kernel@lists.fedoraproject.org
Do not reply to spam on the list, report it: 
https://pagure.io/fedora-infrastructure

Reply via email to