diff options
| author | Alec Ari <alec@onelabs.com> | 2016-10-04 19:34:30 -0300 |
|---|---|---|
| committer | Herbert Xu <herbert@gondor.apana.org.au> | 2016-10-21 11:03:40 +0800 |
| commit | 65e6155086ebfca9336b75a7692410e5cf6abd45 (patch) | |
| tree | 03aa0ef3230493f6f9d49b76209a724bddfadb48 /crypto/Kconfig | |
| parent | 736d25df198dddeec82f61fee130f7d0e4212a9c (diff) | |
| download | linux-crypto-65e6155086ebfca9336b75a7692410e5cf6abd45.tar.gz linux-crypto-65e6155086ebfca9336b75a7692410e5cf6abd45.zip | |
crypto: api - Fix Kconfig dependencies for FIPS
Currently FIPS depends on MODULE_SIG, even if MODULES is disabled.
This change allows the enabling of FIPS without support for modules.
If module loading support is enabled, only then does
FIPS require MODULE_SIG.
Signed-off-by: Alec Ari <neotheuser@gmail.com>
Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
Diffstat (limited to '')
| -rw-r--r-- | crypto/Kconfig | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/crypto/Kconfig b/crypto/Kconfig index 84d71482..fd288053 100644 --- a/crypto/Kconfig +++ b/crypto/Kconfig @@ -24,7 +24,7 @@ comment "Crypto core or helper" config CRYPTO_FIPS bool "FIPS 200 compliance" depends on (CRYPTO_ANSI_CPRNG || CRYPTO_DRBG) && !CRYPTO_MANAGER_DISABLE_TESTS - depends on MODULE_SIG + depends on (MODULE_SIG || !MODULES) help This options enables the fips boot option which is required if you want to system to operate in a FIPS 200 |