Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]
Groups > linux.kernel > #1372640
| From | David Howells <dhowells@redhat.com> |
|---|---|
| Newsgroups | linux.kernel |
| Subject | Re: [RFC PATCH 12/12] IMA: Use the the system trusted keyrings instead of .ima_mok [ver #3] |
| Date | 2016-04-06 18:20 +0200 |
| Message-ID | <rkYls-6yQ-17@gated-at.bofh.it> (permalink) |
| References | <rkG5c-1el-13@gated-at.bofh.it> <raKjM-77j-5@gated-at.bofh.it> <raKtu-7bN-47@gated-at.bofh.it> <rkG5c-1el-13@gated-at.bofh.it> |
| Organization | Red Hat UK Ltd. Registered Address: Red Hat UK Ltd, Amberley Place, 107-111 Peascod Street, Windsor, Berkshire, SI4 1TE, United Kingdom. Registered in England and Wales under Company Registration No. 3798903 |
Mimi Zohar <zohar@linux.vnet.ibm.com> wrote: > FYI, restrict_link_by_ima_mok() allows keys to be added to the IMA > keyring signed by a key on the .ima_mok keyring, but > restrict_link_by_builtin_and_secondary_trusted() results in "errno: > Required key not available (126)". Is that fixed by fixing restrict_link_by_builtin_and_secondary_trusted() to check the right keyring? David
Back to linux.kernel | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread
Re: [RFC PATCH 12/12] IMA: Use the the system trusted keyrings instead of .ima_mok [ver #3] Mimi Zohar <zohar@linux.vnet.ibm.com> - 2016-04-05 22:50 +0200
Re: [RFC PATCH 12/12] IMA: Use the the system trusted keyrings instead of .ima_mok [ver #3] David Howells <dhowells@redhat.com> - 2016-04-06 18:20 +0200
Re: [RFC PATCH 12/12] IMA: Use the the system trusted keyrings instead of .ima_mok [ver #3] Mimi Zohar <zohar@linux.vnet.ibm.com> - 2016-04-06 18:50 +0200
csiph-web