[PATCH v2 1/3] KEYS: DigitalSignature link restriction
Mimi Zohar
zohar at linux.ibm.com
Tue May 23 22:00:59 UTC 2023
On Mon, 2023-05-22 at 19:09 -0400, Eric Snowberg wrote:
> Add a new link restriction. Restrict the addition of keys in a keyring
> based on the key having digitalSignature usage set. Additionally, verify
> the new certificate against the ones in the system keyrings. Add two
> additional functions to use the new restriction within either the builtin
> or secondary keyrings.
>
> Signed-off-by: Eric Snowberg <eric.snowberg at oracle.com>
> Reviewed-by: Mimi Zohar <zohar at linux.ibm.com>
Jarkko, please update the above tag to Reviewed-and-tested-by.
--
thanks,
Mimi
More information about the Linux-security-module-archive
mailing list