Commit 3edc2265 authored by Michal Suchanek's avatar Michal Suchanek Committed by Jarkko Sakkinen
Browse files

integrity: powerpc: Do not select CA_MACHINE_KEYRING 



No other platform needs CA_MACHINE_KEYRING, either.

This is policy that should be decided by the administrator, not Kconfig
dependencies.

Cc: stable@vger.kernel.org # v6.6+
Fixes: d7d91c47 ("integrity: PowerVM machine keyring enablement")
Signed-off-by: default avatarMichal Suchanek <msuchanek@suse.de>
Signed-off-by: default avatarJarkko Sakkinen <jarkko@kernel.org>
parent c745cd17

security/integrity/Kconfig

+0 −2
Original line number Diff line number Diff line
@@ -68,8 +68,6 @@ config INTEGRITY_MACHINE_KEYRING 
	depends on INTEGRITY_ASYMMETRIC_KEYS

	depends on SYSTEM_BLACKLIST_KEYRING

	depends on LOAD_UEFI_KEYS || LOAD_PPC_KEYS

	select INTEGRITY_CA_MACHINE_KEYRING if LOAD_PPC_KEYS

	select INTEGRITY_CA_MACHINE_KEYRING_MAX if LOAD_PPC_KEYS

	help

	 If set, provide a keyring to which Machine Owner Keys (MOK) may

	 be added. This keyring shall contain just MOK keys.  Unlike keys