tree a8980370305989a97b44ddbe7968d9de264f4ea7
parent 74081e0354558f6449ebd9a6e02c734542a7cd9e
author Arnav Kansal <rnv@google.com> 1675103503 +0000
committer COS Cherry Picker <cloud-image-release@prod.google.com> 1693330819 -0700

Enable CONFIG_IMA_LOAD_X509 and set CONFIG_IMA_X509_PATH

Enable loading of X509 public key certificates on to the .ima keyring
automatically from CONFIG_IMA_X509_PATH

BUG=b/292286904
TETS=presubmit
RELEASE_NOTE=Enable trusted IMA certificate loading from
/etc/ima/pubkey.x509

cos-patch: bug
Change-Id: Id78d5d14f53bdab8278e597c6b673939b6ada938
Reviewed-on: https://cos-review.googlesource.com/c/third_party/kernel/+/41526
Tested-by: Cusky Presubmit Bot <presubmit@cos-infra-prod.iam.gserviceaccount.com>
Reviewed-by: Meena Shanmugam <meenashanmugam@google.com>
(cherry picked from commit 93156888115aa5a6e346c33b27ad6ba2894750fc)
Reviewed-on: https://cos-review.googlesource.com/c/third_party/kernel/+/56134
Main-Branch-Verified: Cusky Presubmit Bot <presubmit@cos-infra-prod.iam.gserviceaccount.com>
Reviewed-by: Oleksandr Tymoshenko <ovt@google.com>