Re: [PATCH] ima: add a new CONFIG for loading arch-specific policies

Lakshmi Ramasubramanian
2020-02-26T19:21:02Z

Hi Nayna,

> +
> +config IMA_SECURE_AND_OR_TRUSTED_BOOT
> + bool
> + depends on IMA
> + depends on IMA_ARCH_POLICY
> + default n
> + help
> + This option is selected by architectures to enable secure and/or
> + trusted boot based on IMA runtime policies.
>

Why is the default for this new config "n"?
Is there any reason to not turn on this config if both IMA and
IMA_ARCH_POLICY are set to y?

thanks,
-lakshmi