From d0f6ea926c13ab9a66126c14170d488708c45978 Mon Sep 17 00:00:00 2001 From: Kevin Becker Date: Tue, 16 Jul 2024 22:29:00 +0200 Subject: [PATCH] UBUNTU: [Config]: Enable CONFIG_KEXEC_IMAGE_VERIFY_SIG on arm64 BugLink: https://bugs.launchpad.net/bugs/2033007 This option enables support for kexec image signature verification, allowing signed kernels to be loaded via the kexec_file_load system call. Signed-off-by: Kevin Becker Acked-by: Kevin Becker Acked-by: Paolo Pisati Signed-off-by: Stefan Bader Signed-off-by: Roxana Nicolescu --- debian.master/config/annotations | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/debian.master/config/annotations b/debian.master/config/annotations index 6ea4ce0b800a..e9996de90c8d 100644 --- a/debian.master/config/annotations +++ b/debian.master/config/annotations @@ -7143,7 +7143,7 @@ CONFIG_KEXEC policy<{'amd64': 'y', 'arm64': ' CONFIG_KEXEC_CORE policy<{'amd64': 'y', 'arm64': 'y', 'armhf': 'y', 'ppc64el': 'y', 'riscv64': 'y', 's390x': 'y'}> CONFIG_KEXEC_ELF policy<{'ppc64el': 'y', 'riscv64': 'y'}> CONFIG_KEXEC_FILE policy<{'amd64': 'y', 'arm64': 'y', 'ppc64el': 'y', 'riscv64': 'y', 's390x': 'y'}> -CONFIG_KEXEC_IMAGE_VERIFY_SIG policy<{'arm64': 'n'}> +CONFIG_KEXEC_IMAGE_VERIFY_SIG policy<{'arm64': 'y'}> CONFIG_KEXEC_JUMP policy<{'amd64': 'y'}> CONFIG_KEXEC_SIG policy<{'amd64': 'y', 'arm64': 'y', 's390x': 'y'}> CONFIG_KEXEC_SIG_FORCE policy<{'amd64': 'n'}>