[PATCH] ima: Finish deprecation of IMA_TRUSTED_KEYRING Kconfig

Oleksandr Tymoshenko ovt at google.com
Tue Sep 26 04:20:26 UTC 2023


On Wed, Sep 20, 2023 at 11:45 PM Oleksandr Tymoshenko <ovt at google.com> wrote:
>
> The removal of IMA_TRUSTED_KEYRING made IMA_LOAD_X509
> and IMA_BLACKLIST_KEYRING unavailable because the latter
> two depend on the former. Since IMA_TRUSTED_KEYRING was
> deprecated in favor of INTEGRITY_TRUSTED_KEYRING use it
> as a dependency for the two Kconfigs affected by the
> deprecation.
>
> Fixes: 5087fd9e80e5 ("ima: Remove deprecated IMA_TRUSTED_KEYRING Kconfig")
> Signed-off-by: Oleksandr Tymoshenko <ovt at google.com>

Gentle ping, IMA_LOAD_X509 and IMA_BLACKLIST_KEYRING options are
currently broken on all branches.



More information about the Linux-security-module-archive mailing list