From: Mark Salter <[email protected]>

redhat/configs: Enable early lockdown for Arm

JIRA: https://issues.redhat.com/browse/RHEL-1927

Upstream Status: RHEL only

Author: Mark Salter <[email protected]>
Date: Wed, 12 Mar 2025 18:35:28 -0400

Now that there is a signed shim for Arm, enable early lockdown.

Signed-off-by: Mark Salter <[email protected]>
Signed-off-by: Jeremy Cline <[email protected]>

diff --git 
a/redhat/configs/common/generic/arm/aarch64/CONFIG_LOCK_DOWN_IN_EFI_SECURE_BOOT 
b/redhat/configs/common/generic/arm/aarch64/CONFIG_LOCK_DOWN_IN_EFI_SECURE_BOOT
new file mode 100644
index blahblah..blahblah 100644
--- /dev/null
+++ 
b/redhat/configs/common/generic/arm/aarch64/CONFIG_LOCK_DOWN_IN_EFI_SECURE_BOOT
@@ -0,0 +1 @@
+CONFIG_LOCK_DOWN_IN_EFI_SECURE_BOOT=y

--
https://gitlab.com/cki-project/kernel-ark/-/merge_requests/3862

-- 
_______________________________________________
kernel mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/[email protected]
Do not reply to spam, report it: 
https://pagure.io/fedora-infrastructure/new_issue

Reply via email to