| .. | .. |
|---|
| 1 | +# SPDX-License-Identifier: GPL-2.0-only |
|---|
| 1 | 2 | config SECURITY_LOADPIN |
|---|
| 2 | 3 | bool "Pin load of kernel files (modules, fw, etc) to one filesystem" |
|---|
| 3 | 4 | depends on SECURITY && BLOCK |
|---|
| .. | .. |
|---|
| 10 | 11 | have a root filesystem backed by a read-only device such as |
|---|
| 11 | 12 | dm-verity or a CDROM. |
|---|
| 12 | 13 | |
|---|
| 13 | | -config SECURITY_LOADPIN_ENABLED |
|---|
| 14 | +config SECURITY_LOADPIN_ENFORCE |
|---|
| 14 | 15 | bool "Enforce LoadPin at boot" |
|---|
| 15 | 16 | depends on SECURITY_LOADPIN |
|---|
| 16 | 17 | help |
|---|
| 17 | 18 | If selected, LoadPin will enforce pinning at boot. If not |
|---|
| 18 | 19 | selected, it can be enabled at boot with the kernel parameter |
|---|
| 19 | | - "loadpin.enabled=1". |
|---|
| 20 | + "loadpin.enforce=1". |
|---|