Skip to content

Commit cffb58c

Browse files
committed
config: Make IAK/IDevID disabled by default
When no configuration option is found, the feature should be disabled by default. Signed-off-by: Anderson Toshiyuki Sasaki <[email protected]>
1 parent a744517 commit cffb58c

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

keylime-agent/src/config.rs

+1-1
Original file line numberDiff line numberDiff line change
@@ -57,7 +57,7 @@ pub static DEFAULT_TPM_HASH_ALG: &str = "sha256";
5757
pub static DEFAULT_TPM_ENCRYPTION_ALG: &str = "rsa";
5858
pub static DEFAULT_TPM_SIGNING_ALG: &str = "rsassa";
5959
pub static DEFAULT_EK_HANDLE: &str = "generate";
60-
pub static DEFAULT_ENABLE_IAK_IDEVID: bool = true;
60+
pub static DEFAULT_ENABLE_IAK_IDEVID: bool = false;
6161
pub static DEFAULT_IAK_IDEVID_ASYMMETRIC_ALG: &str = "rsa";
6262
pub static DEFAULT_IAK_IDEVID_NAME_ALG: &str = "sha256";
6363
pub static DEFAULT_IAK_IDEVID_TEMPLATE: &str = "H-1";

0 commit comments

Comments
 (0)