summaryrefslogtreecommitdiffstats
path: root/security/integrity/ima/Kconfig
diff options
context:
space:
mode:
authorBen Hutchings2017-05-02 20:27:00 +0200
committerMimi Zohar2017-06-21 20:37:12 +0200
commit38d192684e8b1811c352c208447d565f8f0a309f (patch)
treee374b2dbde5e8e895b6e65deaf55808495534cd6 /security/integrity/ima/Kconfig
parentima: define is_ima_appraise_enabled() (diff)
downloadkernel-qcow2-linux-38d192684e8b1811c352c208447d565f8f0a309f.tar.gz
kernel-qcow2-linux-38d192684e8b1811c352c208447d565f8f0a309f.tar.xz
kernel-qcow2-linux-38d192684e8b1811c352c208447d565f8f0a309f.zip
IMA: Correct Kconfig dependencies for hash selection
IMA uses the hash algorithm too early to be able to use a module. Require the selected hash algorithm to be built-in. Signed-off-by: Ben Hutchings <ben@decadent.org.uk> Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>
Diffstat (limited to 'security/integrity/ima/Kconfig')
-rw-r--r--security/integrity/ima/Kconfig8
1 files changed, 4 insertions, 4 deletions
diff --git a/security/integrity/ima/Kconfig b/security/integrity/ima/Kconfig
index 8b688a26033d..35ef69312811 100644
--- a/security/integrity/ima/Kconfig
+++ b/security/integrity/ima/Kconfig
@@ -96,19 +96,19 @@ choice
config IMA_DEFAULT_HASH_SHA1
bool "SHA1 (default)"
- depends on CRYPTO_SHA1
+ depends on CRYPTO_SHA1=y
config IMA_DEFAULT_HASH_SHA256
bool "SHA256"
- depends on CRYPTO_SHA256 && !IMA_TEMPLATE
+ depends on CRYPTO_SHA256=y && !IMA_TEMPLATE
config IMA_DEFAULT_HASH_SHA512
bool "SHA512"
- depends on CRYPTO_SHA512 && !IMA_TEMPLATE
+ depends on CRYPTO_SHA512=y && !IMA_TEMPLATE
config IMA_DEFAULT_HASH_WP512
bool "WP512"
- depends on CRYPTO_WP512 && !IMA_TEMPLATE
+ depends on CRYPTO_WP512=y && !IMA_TEMPLATE
endchoice
config IMA_DEFAULT_HASH