Re: [PATCH v2 3/3] ima: support platform keyring for kernel appraisal

2018-03-09 Thread Mimi Zohar
On Fri, 2018-03-09 at 21:08 +0530, Nayna Jain wrote: > Distros may sign the kernel images and, possibly, the initramfs with > platform trusted keys. On secure boot enabled systems or embedded devices, > these signatures are to be validated using keys on the platform keyring. > > This patch

Re: [PATCH v2 3/3] ima: support platform keyring for kernel appraisal

2018-03-09 Thread Mimi Zohar
On Fri, 2018-03-09 at 21:08 +0530, Nayna Jain wrote: > Distros may sign the kernel images and, possibly, the initramfs with > platform trusted keys. On secure boot enabled systems or embedded devices, > these signatures are to be validated using keys on the platform keyring. > > This patch

[PATCH v2 3/3] ima: support platform keyring for kernel appraisal

2018-03-09 Thread Nayna Jain
Distros may sign the kernel images and, possibly, the initramfs with platform trusted keys. On secure boot enabled systems or embedded devices, these signatures are to be validated using keys on the platform keyring. This patch enables IMA-appraisal to access the platform keyring, based on a new

[PATCH v2 3/3] ima: support platform keyring for kernel appraisal

2018-03-09 Thread Nayna Jain
Distros may sign the kernel images and, possibly, the initramfs with platform trusted keys. On secure boot enabled systems or embedded devices, these signatures are to be validated using keys on the platform keyring. This patch enables IMA-appraisal to access the platform keyring, based on a new