From 0c5b1a195596dd5965b0c307835d40f2c355b021 Mon Sep 17 00:00:00 2001 From: Johannes Mey <johannes.mey@tu-dresden.de> Date: Fri, 9 Jun 2023 14:28:02 +0200 Subject: [PATCH] another fix --- README.md | 1 + config | 2 +- 2 files changed, 2 insertions(+), 1 deletion(-) diff --git a/README.md b/README.md index 8fd0a1b..1dbd221 100644 --- a/README.md +++ b/README.md @@ -10,6 +10,7 @@ It's `config` file is based on the config provided by a Ubuntu 22.04 installatio - The `preemption model` is set to `Fully Preemptible Kernel (RT)`. - `Compile the kernel with debug info (DEBUG_INFO)` is set to `no`. - `Additional X.509 keys for default system keyring` (`CONFIG_SYSTEM_TRUSTED_KEYS`) set to "" +- `X.509 certificates to be preloaded into the system blacklist keyring` (`CONFIG_SYSTEM_REVOCATION_KEYS`) is set to "" Before the build, if the new kernel version contains new config keys, the corresponding values are set to their defaults. diff --git a/config b/config index 6fb68f0..b992e0e 100644 --- a/config +++ b/config @@ -10743,7 +10743,7 @@ CONFIG_SECONDARY_TRUSTED_KEYRING=y CONFIG_SYSTEM_BLACKLIST_KEYRING=y CONFIG_SYSTEM_BLACKLIST_HASH_LIST="" CONFIG_SYSTEM_REVOCATION_LIST=y -CONFIG_SYSTEM_REVOCATION_KEYS="debian/canonical-revoked-certs.pem" +CONFIG_SYSTEM_REVOCATION_KEYS="" # end of Certificates for signature checking CONFIG_BINARY_PRINTF=y -- GitLab