powerpc: add security.config, enforcing lockdown=integrity
authorDaniel Axtens <dja@axtens.net>
Thu, 3 Dec 2020 04:28:07 +0000 (15:28 +1100)
committerMichael Ellerman <mpe@ellerman.id.au>
Thu, 3 Dec 2020 14:01:34 +0000 (01:01 +1100)
commited2bbd2b8581313ca18a7c586a947f6cdd93a52a
tree2a590a358eb5f68b2c379f641a3bafd7b4ed2e31
parent1f69aa0b89240653fdf708aada6a3d968447cce7
powerpc: add security.config, enforcing lockdown=integrity

It's sometimes handy to have a config that boots a bit like a system
under secure boot (forcing lockdown=integrity, without needing any
extra stuff like a command line option).

This config file allows that, and also turns on a few assorted security
and hardening options for good measure.

Suggested-by: Michael Ellerman <mpe@ellerman.id.au>
Signed-off-by: Daniel Axtens <dja@axtens.net>
Signed-off-by: Michael Ellerman <mpe@ellerman.id.au>
Link: https://lore.kernel.org/r/20201203042807.1293655-1-dja@axtens.net
arch/powerpc/configs/security.config [new file with mode: 0644]