Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit a3aef94b authored by Dmitry Kasatkin's avatar Dmitry Kasatkin Committed by Mimi Zohar
Browse files

evm: enable key retention service automatically 



If keys are not enabled, EVM is not visible in the configuration menu.
It may be difficult to figure out what to do unless you really know.
Other subsystems as NFS, CIFS select keys automatically. This patch does
the same.

This patch also removes '(TRUSTED_KEYS=y || TRUSTED_KEYS=n)' dependency,
which is unnecessary. EVM does not depend on trusted keys, but on
encrypted keys. evm.h provides compile time dependency.

Signed-off-by: default avatarDmitry Kasatkin <d.kasatkin@samsung.com>
Signed-off-by: default avatarMimi Zohar <zohar@linux.vnet.ibm.com>
parent 1d91ac62

security/integrity/evm/Kconfig

+3 −2
Original line number Diff line number Diff line 
config EVM

	boolean "EVM support"

	depends on SECURITY && KEYS && (TRUSTED_KEYS=y || TRUSTED_KEYS=n)

	depends on SECURITY

	select KEYS

	select ENCRYPTED_KEYS

	select CRYPTO_HMAC

	select CRYPTO_SHA1

	select ENCRYPTED_KEYS

	default n

	help

	  EVM protects a file's security extended attributes against