[PATCH] init: Make SYSTEM_DATA_VERIFICATION a visible symbol

From: klondike
Date: Sat Oct 05 2019 - 10:45:58 EST


PKCS7_TEST_KEY and SIGNED_PE_FILE_VERIFICATION both depend on
SYSTEM_DATA_VERIFICATION which is non-visibile. As result these symbols
can not be chosen unless another symbol selecting
SYSTEM_DATA_VERIFICATION is already chosen.

Make SYSTEM_DATA_VERIFICATION visible so that PKCS7_TEST_KEY and
SIGNED_PE_FILE_VERIFICATION can be chosen by users when other symbols
selecting SYSTEM_DATA_VERIFICATION are not selected.

Also complete the help section so that this becomes clear to users.

Signed-off-by: Francisco Blas Izquierdo Riera (klondike) <klondike@xxxxxxxxxxx>
Cc: David Howells <dhowells@xxxxxxxxxx>
Cc: Vivek Goyal <vgoyal@xxxxxxxxxx>

diff --git a/init/Kconfig b/init/Kconfig
index b4daad2bac23..6e2efdff8cf7 100644
--- a/init/Kconfig
+++ b/init/Kconfig
@@ -1921,7 +1921,8 @@ config MMAP_ALLOW_UNINITIALIZED
See Documentation/nommu-mmap.txt for more information.
config SYSTEM_DATA_VERIFICATION
- def_bool n
+ bool "Support signed data verification"
+ default n
select SYSTEM_TRUSTED_KEYRING
select KEYS
select CRYPTO
@@ -1938,6 +1939,9 @@ config SYSTEM_DATA_VERIFICATION
module verification, kexec image verification and firmware blob
verification.
+ If you want to be able to verify the signatures of images sent to
+ kexec, you must enable this option.
+
config PROFILING
bool "Profiling support"
help