X-Git-Url: https://git.karo-electronics.de/?a=blobdiff_plain;f=init%2FKconfig;h=73766535ded5bc0a230248db7f7552bb8df7c53d;hb=2b0c156a8d3a97159bd8391a8cf5ff6995d6e395;hp=d9887456007a83b212eb41dabf95f7d8c781c6b4;hpb=d09f4bdc4b8feadbb3326d4e6e0890556b19bf07;p=karo-tx-linux.git

diff --git a/init/Kconfig b/init/Kconfig
index d9887456007a..73766535ded5 100644
--- a/init/Kconfig
+++ b/init/Kconfig
@@ -1668,6 +1668,18 @@ config BASE_SMALL
 	default 0 if BASE_FULL
 	default 1 if !BASE_FULL
 
+config SYSTEM_TRUSTED_KEYRING
+	bool "Provide system-wide ring of trusted keys"
+	depends on KEYS
+	help
+	  Provide a system keyring to which trusted keys can be added.  Keys in
+	  the keyring are considered to be trusted.  Keys may be added at will
+	  by the kernel from compiled-in data and from hardware key stores, but
+	  userspace may only add extra keys if those keys can be verified by
+	  keys already in the keyring.
+
+	  Keys in this keyring are used by module signature checking.
+
 menuconfig MODULES
 	bool "Enable loadable module support"
 	option modules
@@ -1741,6 +1753,7 @@ config MODULE_SRCVERSION_ALL
 config MODULE_SIG
 	bool "Module signature verification"
 	depends on MODULES
+	select SYSTEM_TRUSTED_KEYRING
 	select KEYS
 	select CRYPTO
 	select ASYMMETRIC_KEY_TYPE