Re: [PATCH] IMA: Turn IMA_MEASURE_ASYMMETRIC_KEYS off by default

[Mimi Zohar]

On Tue, 2020-01-21 at 11:52 -0800, James Bottomley wrote:
> On Tue, 2020-01-21 at 14:13 -0500, Mimi Zohar wrote:

> > This change permits disabling queueing certificates.  Whether the
> > default should be "disabled" is a separate question.  I'm open to
> > comments/suggestions.
> 
> I'm just giving the general rule of thumb for boolean config options. 
> If it's default Y there likely shouldn't be a config option and if it's
> default N the feature should likely not be in the kernel at all.

Thanks, James. ÂI'll keep this in mind when debating about defining a
new Kconfig option.

Mimi