From a460debc8ea366c0c706de3b71e2c6ff56988791 Mon Sep 17 00:00:00 2001
From: Luca Boccassi <bluca@debian.org>
Date: Sat, 12 Nov 2022 01:07:13 +0000
Subject: README: note Kconfig for verifying DDIs via MoK keys

Also note them in the mkosi.build kernel config list
---
 README | 5 +++++
 1 file changed, 5 insertions(+)

(limited to 'README')

diff --git a/README b/README
index f6e92464c2..d8c279f9fa 100644
--- a/README
+++ b/README
@@ -128,6 +128,11 @@ REQUIREMENTS:
 
         Required for signed Verity images support:
           CONFIG_DM_VERITY_VERIFY_ROOTHASH_SIG
+        Required to verify signed Verity images using keys enrolled in the MoK
+        (Machine-Owner Key) keyring:
+          CONFIG_DM_VERITY_VERIFY_ROOTHASH_SIG_SECONDARY_KEYRING
+          CONFIG_IMA_ARCH_POLICY
+          CONFIG_INTEGRITY_MACHINE_KEYRING
 
         Required for RestrictFileSystems= in service units:
           CONFIG_BPF
-- 
cgit v1.2.1