commit 93156888115aa5a6e346c33b27ad6ba2894750fc
author Arnav Kansal <rnv@google.com> Mon Jan 30 18:31:43 2023 +0000
committer Arnav Kansal <rnv@google.com> Wed Feb 01 00:51:40 2023 +0000
tree fb037df53108232845066c29a9143de90255f6c3
parent 1a0d149aaf41939663a6605ed67d7aedbd12e6a5

Enable CONFIG_IMA_LOAD_X509 and set CONFIG_IMA_X509_PATH

Enable loading of X509 public key certificates on to the .ima keyring
automatically from CONFIG_IMA_X509_PATH

BUG=b/235364591
TETS=presubmit
RELEASE_NOTE=Enable trusted IMA certificate loading from
/etc/ima/pubkey.x509

Change-Id: Id78d5d14f53bdab8278e597c6b673939b6ada938
Reviewed-on: https://cos-review.googlesource.com/c/third_party/kernel/+/41526
Tested-by: Cusky Presubmit Bot <presubmit@cos-infra-prod.iam.gserviceaccount.com>
Reviewed-by: Meena Shanmugam <meenashanmugam@google.com>