7 Mar
2023
7 Mar
'23
19:25
On Tue, Mar 07, 2023 at 07:17:24PM -0000, Joe Salmeri wrote:
Hi Michal,
If you mean to do this
CONFIG_IMA_KEYRINGS_PERMIT_SIGNED_BY_BUILTIN_OR_SECONDARY='y'
The kernel would have to be rebuilt with the option. And is is incompatible with the machine keyring. Hopefully it is not needed. The option name and description do not match all that well. Thanks Michal