[PATCH v2 1/3] KEYS: DigitalSignature link restriction

Mimi Zohar zohar at linux.ibm.com
Tue May 23 22:00:59 UTC 2023


On Mon, 2023-05-22 at 19:09 -0400, Eric Snowberg wrote:
> Add a new link restriction.  Restrict the addition of keys in a keyring
> based on the key having digitalSignature usage set. Additionally, verify
> the new certificate against the ones in the system keyrings.  Add two
> additional functions to use the new restriction within either the builtin
> or secondary keyrings.
> 
> Signed-off-by: Eric Snowberg <eric.snowberg at oracle.com>
> Reviewed-by: Mimi Zohar <zohar at linux.ibm.com>

Jarkko, please update the above tag to Reviewed-and-tested-by. 
-- 
thanks,

Mimi



More information about the Linux-security-module-archive mailing list