Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]
Groups > linux.kernel > #1372660
| Path | csiph.com!aioe.org!bofh.it!news.nic.it!robomod |
|---|---|
| From | Mimi Zohar <zohar@linux.vnet.ibm.com> |
| Newsgroups | linux.kernel |
| Subject | Re: [RFC PATCH 12/12] IMA: Use the the system trusted keyrings instead of .ima_mok [ver #3] |
| Date | Wed, 06 Apr 2016 18:50:02 +0200 |
| Message-ID | <rkYOu-6Mu-17@gated-at.bofh.it> (permalink) |
| References | <rkG5c-1el-13@gated-at.bofh.it> <raKjM-77j-5@gated-at.bofh.it> <raKtu-7bN-47@gated-at.bofh.it> <rkYls-6yQ-17@gated-at.bofh.it> |
| X-Original-To | David Howells <dhowells@redhat.com> |
| X-Ibm-Helo | d28relay01.in.ibm.com |
| X-Ibm-Mailfrom | zohar@linux.vnet.ibm.com |
| X-Ibm-Rcptto | linux-kernel@vger.kernel.org;keyrings@vger.kernel.org;linux-security-module@vger.kernel.org |
| Content-Type | text/plain; charset="UTF-8" |
| X-Mailer | Evolution 3.12.11 (3.12.11-1.fc21) |
| MIME-Version | 1.0 |
| Content-Transfer-Encoding | 7bit |
| X-Tm-As-Mml | disable |
| X-Cbid | 16040616-0013-0000-0000-00000B7A4A78 |
| Sender | robomod@news.nic.it |
| List-ID | <linux-kernel.vger.kernel.org> |
| X-Mailing-List | linux-kernel@vger.kernel.org |
| Approved | robomod@news.nic.it |
| Lines | 12 |
| Organization | linux.* mail to news gateway |
| X-Original-Cc | linux-security-module@vger.kernel.org, keyrings@vger.kernel.org, linux-kernel@vger.kernel.org |
| X-Original-Date | Wed, 06 Apr 2016 12:47:31 -0400 |
| X-Original-Message-ID | <1459961251.3166.21.camel@linux.vnet.ibm.com> |
| X-Original-References | <1459889302.3166.5.camel@linux.vnet.ibm.com> <20160309111814.28811.95697.stgit@warthog.procyon.org.uk> <20160309111939.28811.7952.stgit@warthog.procyon.org.uk> <3191.1459959224@warthog.procyon.org.uk> |
| X-Original-Sender | linux-kernel-owner@vger.kernel.org |
| Xref | csiph.com linux.kernel:1372660 |
Show key headers only | View raw
On Wed, 2016-04-06 at 17:13 +0100, David Howells wrote: > Mimi Zohar <zohar@linux.vnet.ibm.com> wrote: > > > FYI, restrict_link_by_ima_mok() allows keys to be added to the IMA > > keyring signed by a key on the .ima_mok keyring, but > > restrict_link_by_builtin_and_secondary_trusted() results in "errno: > > Required key not available (126)". > > Is that fixed by fixing restrict_link_by_builtin_and_secondary_trusted() to > check the right keyring? Yes
Back to linux.kernel | Previous | Next — Previous in thread | Find similar | Unroll thread
Re: [RFC PATCH 12/12] IMA: Use the the system trusted keyrings instead of .ima_mok [ver #3] Mimi Zohar <zohar@linux.vnet.ibm.com> - 2016-04-05 22:50 +0200
Re: [RFC PATCH 12/12] IMA: Use the the system trusted keyrings instead of .ima_mok [ver #3] David Howells <dhowells@redhat.com> - 2016-04-06 18:20 +0200
Re: [RFC PATCH 12/12] IMA: Use the the system trusted keyrings instead of .ima_mok [ver #3] Mimi Zohar <zohar@linux.vnet.ibm.com> - 2016-04-06 18:50 +0200
csiph-web