From: Thomas Lamprecht <t.lamprecht@proxmox.com>
Date: Fri, 26 Feb 2021 12:41:09 +0000 (+0100)
Subject: d/rules: disable CONFIG_SYSTEM_TRUSTED_KEYS config
X-Git-Url: https://git.proxmox.com/?p=pve-kernel.git;a=commitdiff_plain;h=68996764bbd13785f014211eef6630286c74fc9a

d/rules: disable CONFIG_SYSTEM_TRUSTED_KEYS config

we do not use module signing currently.

Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
(cherry picked from commit 77470417dbd11602d288f7fc473f59d9118a4e61)
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
---

diff --git a/debian/rules b/debian/rules
index 48680f8..15b705b 100755
--- a/debian/rules
+++ b/debian/rules
@@ -73,6 +73,7 @@ PVE_CONFIG_OPTS= \
 -d CONFIG_UNWINDER_ORC \
 -d CONFIG_UNWINDER_GUESS \
 -e CONFIG_UNWINDER_FRAME_POINTER \
+--set-str CONFIG_SYSTEM_TRUSTED_KEYS ""\
 -d CONFIG_SECURITY_LOCKDOWN_LSM \
 -d CONFIG_SECURITY_LOCKDOWN_LSM_EARLY \
 --set-str CONFIG_LSM yama,integrity,apparmor \