Aren
/
NetBSD
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Pull up following revision(s) via patch, as options differ between 

current and this branch (requested by sevan in ticket #1251):

	sys/dev/veriexec.config: revision 1.1

Add a configuration file for enabling Veriexec in kernel config(5) files.
This commit is contained in:
martin 2019-05-01 09:04:24 +00:00
parent 22529890fe
commit ca4a179cf9
1 changed files with 21 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

21
sys/dev/veriexec.config Normal file
View File

@ -0,0 +1,21 @@
# $NetBSD: veriexec.config,v 1.1.2.2 2019/05/01 09:04:24 martin Exp $
#
# This file contains all Veriexec related configuration.
# It is suitable for inclusion in a kernel config(5) file.
#
options FILEASSOC # fileassoc(9) - needed by Veriexec
# and PAX_SEGVGUARD
# a pseudo device needed for veriexec
pseudo-device veriexec
#
# Note that removing fingerprint methods will have almost no impact on the
# kernel code size.
#
options VERIFIED_EXEC_FP_MD5
options VERIFIED_EXEC_FP_RMD160
options VERIFIED_EXEC_FP_SHA1
options VERIFIED_EXEC_FP_SHA256
options VERIFIED_EXEC_FP_SHA384
options VERIFIED_EXEC_FP_SHA512