Re: [RFC PATCH v14 17/19] scripts: add boot policy generation program

[Randy Dunlap]

On 3/6/24 15:34, Fan Wu wrote:
>  if SECURITY_IPE
> +config IPE_BOOT_POLICY
> +	string "Integrity policy to apply on system startup"
> +	help
> +	  This option specifies a filepath to a IPE policy that is compiled

	                                      an IPE

> +	  into the kernel. This policy will be enforced until a policy update
> +	  is deployed via the $securityfs/ipe/policies/$policy_name/active
> +	  interface.

-- 
#Randy