Lines Matching full:signed

186 	  to be signed.  Unsigned files might prevent the system from
194 	  This option defines a policy requiring all firmware to be signed,
205 	  be signed and verified by a public key on the trusted IMA
217 	  Enabling this rule will require all kernel modules to be signed
229 	  Enabling this rule will require the IMA policy to be signed and
249 	   appended signature is the same used for signed kernel modules.
254 	bool "Require all keys on the .ima keyring be signed (deprecated)"
261 	   keyring be signed by a key on the system trusted keyring.
266 	bool "Permit keys validly signed by a built-in or secondary CA cert (EXPERIMENTAL)"
274 	  key is validly signed by a CA cert in the system built-in or
279 	  provided they are validly signed by a key already resident in the
300 	   X509 certificates signed by a trusted key on the
312 	bool "Require signed user-space initialization"
316 	   This option requires user-space init to be signed.