summaryrefslogtreecommitdiff
path: root/security/ipe/Kconfig
diff options
context:
space:
mode:
Diffstat (limited to 'security/ipe/Kconfig')
-rw-r--r--security/ipe/Kconfig10
1 files changed, 10 insertions, 0 deletions
diff --git a/security/ipe/Kconfig b/security/ipe/Kconfig
index 6bc487b689e0..fccc69e66af1 100644
--- a/security/ipe/Kconfig
+++ b/security/ipe/Kconfig
@@ -21,6 +21,16 @@ menuconfig SECURITY_IPE
If unsure, answer N.
if SECURITY_IPE
+config IPE_BOOT_POLICY
+ string "Integrity policy to apply on system startup"
+ help
+ This option specifies a filepath to an IPE policy that is compiled
+ into the kernel. This policy will be enforced until a policy update
+ is deployed via the $securityfs/ipe/policies/$policy_name/active
+ interface.
+
+ If unsure, leave blank.
+
menu "IPE Trust Providers"
config IPE_PROP_DM_VERITY