IMA_APPRAISE_MODSIG is used for verifying the integrity of both kernel
and modules. Enabling IMA_APPRAISE_MODSIG without MODULES causes a build
break.
Ensure the build time kernel signing key is only generated if both
IMA_APPRAISE_MODSIG and MODULES are enabled.
Fixes:
|
||
|---|---|---|
| .. | ||
| .gitignore | ||
| Kconfig | ||
| Makefile | ||
| blacklist.c | ||
| blacklist.h | ||
| blacklist_hashes.c | ||
| blacklist_nohashes.c | ||
| system_certificates.S | ||
| system_keyring.c | ||