summaryrefslogtreecommitdiff
path: root/src/shared/image-policy.h
diff options
context:
space:
mode:
authorLennart Poettering <lennart@poettering.net>2022-12-13 16:27:48 +0100
committerLennart Poettering <lennart@poettering.net>2023-04-05 20:53:04 +0200
commita594288d79f27147d95662927aa67c0567deb6cc (patch)
tree129114f3a525ea689d2fedb228d56d66b3e3db59 /src/shared/image-policy.h
parent73740c9f842a6fda8bba9af65dff82658a9aec90 (diff)
downloadsystemd-a594288d79f27147d95662927aa67c0567deb6cc.tar.gz
sysext: default to a stricter image policy when reading /.extra/sysext/ DDIs
Diffstat (limited to 'src/shared/image-policy.h')
-rw-r--r--src/shared/image-policy.h3
1 files changed, 2 insertions, 1 deletions
diff --git a/src/shared/image-policy.h b/src/shared/image-policy.h
index 278c06c36a..a5e37642af 100644
--- a/src/shared/image-policy.h
+++ b/src/shared/image-policy.h
@@ -57,7 +57,8 @@ struct ImagePolicy {
extern const ImagePolicy image_policy_allow;
extern const ImagePolicy image_policy_deny;
extern const ImagePolicy image_policy_ignore;
-extern const ImagePolicy image_policy_sysext;
+extern const ImagePolicy image_policy_sysext; /* No verity required */
+extern const ImagePolicy image_policy_sysext_strict; /* Signed verity required */
extern const ImagePolicy image_policy_container;
extern const ImagePolicy image_policy_service;
extern const ImagePolicy image_policy_host;