Skip to content

Commit 4140ff8

Browse files
committed
Disable CONFIG_SECURITY_LOCKDOWN_LSM and CONFIG_MODULE_SIG
Signed-off-by: Mitchell Levy <levymitchell0@gmail.com>
1 parent 19e4769 commit 4140ff8

2 files changed

Lines changed: 4 additions & 36 deletions

File tree

arch/arm64/configs/config-wsl-arm64

Lines changed: 2 additions & 18 deletions
Original file line numberDiff line numberDiff line change
@@ -858,7 +858,6 @@ CONFIG_FUNCTION_ALIGNMENT=8
858858

859859
CONFIG_RT_MUTEXES=y
860860
CONFIG_BASE_SMALL=0
861-
CONFIG_MODULE_SIG_FORMAT=y
862861
CONFIG_MODULES=y
863862
# CONFIG_MODULE_DEBUG is not set
864863
CONFIG_MODULE_FORCE_LOAD=y
@@ -868,15 +867,7 @@ CONFIG_MODULE_UNLOAD=y
868867
CONFIG_MODVERSIONS=y
869868
CONFIG_ASM_MODVERSIONS=y
870869
# CONFIG_MODULE_SRCVERSION_ALL is not set
871-
CONFIG_MODULE_SIG=y
872-
# CONFIG_MODULE_SIG_FORCE is not set
873-
CONFIG_MODULE_SIG_ALL=y
874-
# CONFIG_MODULE_SIG_SHA1 is not set
875-
# CONFIG_MODULE_SIG_SHA224 is not set
876-
# CONFIG_MODULE_SIG_SHA256 is not set
877-
# CONFIG_MODULE_SIG_SHA384 is not set
878-
CONFIG_MODULE_SIG_SHA512=y
879-
CONFIG_MODULE_SIG_HASH="sha512"
870+
# CONFIG_MODULE_SIG is not set
880871
CONFIG_MODULE_COMPRESS_NONE=y
881872
# CONFIG_MODULE_COMPRESS_GZIP is not set
882873
# CONFIG_MODULE_COMPRESS_XZ is not set
@@ -9611,11 +9602,7 @@ CONFIG_SECURITY_APPARMOR_PARANOID_LOAD=y
96119602
# CONFIG_SECURITY_LOADPIN is not set
96129603
CONFIG_SECURITY_YAMA=y
96139604
CONFIG_SECURITY_SAFESETID=y
9614-
CONFIG_SECURITY_LOCKDOWN_LSM=y
9615-
CONFIG_SECURITY_LOCKDOWN_LSM_EARLY=y
9616-
CONFIG_LOCK_DOWN_KERNEL_FORCE_NONE=y
9617-
# CONFIG_LOCK_DOWN_KERNEL_FORCE_INTEGRITY is not set
9618-
# CONFIG_LOCK_DOWN_KERNEL_FORCE_CONFIDENTIALITY is not set
9605+
# CONFIG_SECURITY_LOCKDOWN_LSM is not set
96199606
CONFIG_SECURITY_LANDLOCK=y
96209607
CONFIG_INTEGRITY=y
96219608
# CONFIG_INTEGRITY_SIGNATURE is not set
@@ -9967,9 +9954,6 @@ CONFIG_PKCS7_MESSAGE_PARSER=y
99679954
#
99689955
# Certificates for signature checking
99699956
#
9970-
CONFIG_MODULE_SIG_KEY="certs/signing_key.pem"
9971-
CONFIG_MODULE_SIG_KEY_TYPE_RSA=y
9972-
# CONFIG_MODULE_SIG_KEY_TYPE_ECDSA is not set
99739957
CONFIG_SYSTEM_TRUSTED_KEYRING=y
99749958
CONFIG_SYSTEM_TRUSTED_KEYS=""
99759959
# CONFIG_SYSTEM_EXTRA_CERTIFICATE is not set

arch/x86/configs/config-wsl

Lines changed: 2 additions & 18 deletions
Original file line numberDiff line numberDiff line change
@@ -897,7 +897,6 @@ CONFIG_FUNCTION_ALIGNMENT=16
897897

898898
CONFIG_RT_MUTEXES=y
899899
CONFIG_BASE_SMALL=0
900-
CONFIG_MODULE_SIG_FORMAT=y
901900
CONFIG_MODULES=y
902901
# CONFIG_MODULE_DEBUG is not set
903902
CONFIG_MODULE_FORCE_LOAD=y
@@ -907,15 +906,7 @@ CONFIG_MODULE_UNLOAD=y
907906
CONFIG_MODVERSIONS=y
908907
CONFIG_ASM_MODVERSIONS=y
909908
# CONFIG_MODULE_SRCVERSION_ALL is not set
910-
CONFIG_MODULE_SIG=y
911-
# CONFIG_MODULE_SIG_FORCE is not set
912-
CONFIG_MODULE_SIG_ALL=y
913-
# CONFIG_MODULE_SIG_SHA1 is not set
914-
# CONFIG_MODULE_SIG_SHA224 is not set
915-
# CONFIG_MODULE_SIG_SHA256 is not set
916-
# CONFIG_MODULE_SIG_SHA384 is not set
917-
CONFIG_MODULE_SIG_SHA512=y
918-
CONFIG_MODULE_SIG_HASH="sha512"
909+
# CONFIG_MODULE_SIG is not set
919910
CONFIG_MODULE_COMPRESS_NONE=y
920911
# CONFIG_MODULE_COMPRESS_GZIP is not set
921912
# CONFIG_MODULE_COMPRESS_XZ is not set
@@ -7294,11 +7285,7 @@ CONFIG_SECURITY_APPARMOR_PARANOID_LOAD=y
72947285
# CONFIG_SECURITY_LOADPIN is not set
72957286
CONFIG_SECURITY_YAMA=y
72967287
CONFIG_SECURITY_SAFESETID=y
7297-
CONFIG_SECURITY_LOCKDOWN_LSM=y
7298-
CONFIG_SECURITY_LOCKDOWN_LSM_EARLY=y
7299-
CONFIG_LOCK_DOWN_KERNEL_FORCE_NONE=y
7300-
# CONFIG_LOCK_DOWN_KERNEL_FORCE_INTEGRITY is not set
7301-
# CONFIG_LOCK_DOWN_KERNEL_FORCE_CONFIDENTIALITY is not set
7288+
# CONFIG_SECURITY_LOCKDOWN_LSM is not set
73027289
CONFIG_SECURITY_LANDLOCK=y
73037290
CONFIG_INTEGRITY=y
73047291
# CONFIG_INTEGRITY_SIGNATURE is not set
@@ -7614,9 +7601,6 @@ CONFIG_PKCS7_MESSAGE_PARSER=y
76147601
#
76157602
# Certificates for signature checking
76167603
#
7617-
CONFIG_MODULE_SIG_KEY="certs/signing_key.pem"
7618-
CONFIG_MODULE_SIG_KEY_TYPE_RSA=y
7619-
# CONFIG_MODULE_SIG_KEY_TYPE_ECDSA is not set
76207604
CONFIG_SYSTEM_TRUSTED_KEYRING=y
76217605
CONFIG_SYSTEM_TRUSTED_KEYS=""
76227606
# CONFIG_SYSTEM_EXTRA_CERTIFICATE is not set

0 commit comments

Comments
 (0)