help
Enable the kernel lock down functionality automatically at boot.
-config ALLOW_LOCKDOWN_LIFT_BY_SYSRQ
- bool "Allow the kernel lockdown to be lifted by SysRq"
- depends on LOCK_DOWN_KERNEL
- depends on !LOCK_DOWN_KERNEL_FORCE
- depends on MAGIC_SYSRQ
- depends on X86
- help
- Allow the lockdown on a kernel to be lifted, by pressing a SysRq key
- combination on a wired keyboard. On x86, this is SysRq+x.
-
config LOCK_DOWN_IN_EFI_SECURE_BOOT
bool "Lock down the kernel in EFI Secure Boot mode"
default n