[PATCH 3/9][D] UBUNTU: [Config] Update kexec signature config options

[Seth Forshee]

BugLink: https://bugs.launchpad.net/bugs/1884159

A previous patch split KEXEC_VERIFY_SIG into KEXEC_SIG and
KEXEC_SIG_FORCE. Update our configs to enable KEXEC_SIG and
disable KEXEC_SIG_FORCE. This will make the kernel reject images
with invalid signtures, but will still permit loading of unsigned
images when lockdown is not enabled.

Signed-off-by: Seth Forshee <seth.forshee at canonical.com>
---
 debian.master/config/config.common.ubuntu | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/debian.master/config/config.common.ubuntu b/debian.master/config/config.common.ubuntu
index e65214903dbc..c81adc5f345f 100644
--- a/debian.master/config/config.common.ubuntu
+++ b/debian.master/config/config.common.ubuntu
@@ -4794,6 +4794,8 @@ CONFIG_KEXEC_BZIMAGE_VERIFY_SIG=y
 CONFIG_KEXEC_CORE=y
 # CONFIG_KEXEC_IMAGE_VERIFY_SIG is not set
 CONFIG_KEXEC_JUMP=y
+CONFIG_KEXEC_SIG=y
+# CONFIG_KEXEC_SIG_FORCE is not set
 CONFIG_KEXEC_VERIFY_SIG=y
 CONFIG_KEYBOARD_ADC=m
 CONFIG_KEYBOARD_ADP5520=m
-- 
2.27.0