[PATCH v5 9/9] pseries/plpks/wrapkey: expose PKWM wrapping key management to userspace via sysfs

[sashiko-bot at kernel.org]

> The PKWM trusted source currently uses a single default wrapping key
> created during initialization. However, PKWM also supports user-created
> wrapping keys for better isolation between trusted keys.
> 
> Expose wrapping key lifecycle operations through sysfs to allow users to
> create and manage their own wrapping keys.
> 
> Create a sysfs interface at /sys/firmware/plpks/wrapkey with the following
> attributes:
> 
>   create        - Create a new wrapping key with a user-provided label
>   delete        - Delete a revoked wrapping key by label
>   revoke        - Revoke a wrapping key by label
>   unrevoke      - Unrevoke a previously revoked wrapping key by label
>   list_active   - List labels of all active (non-revoked) wrapping keys
> [ ... ]
> 
> These user-created wrapping keys can be used in seal operations via the
> wrapping_key=<label> option.
> 
> Signed-off-by: Srish Srinivasan <ssrish at linux.ibm.com>

Sashiko has reviewed this patch and found no issues.

-- 
Sashiko AI review · https://sashiko.dev/#/patchset/20261018170844.491252-1-ssrish@linux.ibm.com?part=9