From a79b6dc0706dd5fe76ec56b3308b402c133ead23 Mon Sep 17 00:00:00 2001 From: Luca Boccassi Date: Thu, 4 Jul 2024 16:58:46 +0100 Subject: [PATCH] README: update requirements for signed dm-verity The newest kconfig enabling DB-verified dm-verity images is queued for 6.11: https://patchwork.kernel.org/project/dm-devel/patch/20240617220037.594792-1-luca.boccassi@gmail.com/ --- README | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/README b/README index f8f130e0159..7c7bbaf0701 100644 --- a/README +++ b/README @@ -130,9 +130,10 @@ REQUIREMENTS: Required for signed Verity images support: CONFIG_DM_VERITY_VERIFY_ROOTHASH_SIG - Required to verify signed Verity images using keys enrolled in the MoK - (Machine-Owner Key) keyring: + Required to verify signed Verity images using keys enrolled in the MOK + (Machine-Owner Key) and DB UEFI certificate stores: CONFIG_DM_VERITY_VERIFY_ROOTHASH_SIG_SECONDARY_KEYRING + CONFIG_DM_VERITY_VERIFY_ROOTHASH_SIG_PLATFORM_KEYRING CONFIG_IMA_ARCH_POLICY CONFIG_INTEGRITY_MACHINE_KEYRING -- 2.47.3