default or selected kernelversion does not have config value CONFIG_IMA_MOK_KEYRING.
Result is shown for kernelversion 5.4.229
Create IMA machine owner keys (MOK) and blacklist keyrings
modulename: ima_mok.ko
configname: CONFIG_IMA_MOK_KEYRING
Linux Kernel Configuration
└─>Security options
└─>Create IMA machine owner keys (MOK) and blacklist keyrings
In linux kernel since version 4.5 (release Date: 2016-03-13)
This option creates IMA MOK and blacklist keyrings. IMA MOK is an
intermediate keyring that sits between .system and .ima keyrings,
effectively forming a simple CA hierarchy. To successfully import a
key into .ima_mok it must be signed by a key which CA is in .system
keyring. On turn any key that needs to go in .ima keyring must be
signed by CA in either .system or .ima_mok keyrings. IMA MOK is empty
at kernel boot.
IMA blacklist keyring contains all revoked IMA keys. It is consulted
before any other keyring. If the search is successful the requested
operation is rejected and error is returned to the caller.
intermediate keyring that sits between .system and .ima keyrings,
effectively forming a simple CA hierarchy. To successfully import a
key into .ima_mok it must be signed by a key which CA is in .system
keyring. On turn any key that needs to go in .ima keyring must be
signed by CA in either .system or .ima_mok keyrings. IMA MOK is empty
at kernel boot.
IMA blacklist keyring contains all revoked IMA keys. It is consulted
before any other keyring. If the search is successful the requested
operation is rejected and error is returned to the caller.