[PATCH v5 7/9] pseries/plpks: add HCALLs for PKWM wrapping key life cycle management

sashiko-bot at kernel.org sashiko-bot at kernel.org
Sun Oct 18 17:23:03 UTC 2026


> The PKWM trusted source uses a single wrapping key per LPAR, created only
> once during trust source initialization. All the wrap and unwrap requests
> are bound to this default wrapping key.
> 
> Implement H_PKS_REVOKE_OBJECT, H_PKS_UNREVOKE_OBJECT, and
> H_PKS_GET_OBJECTLABELS HCALLs to enable support for revoking and unrevoking
> PKWM wrapping keys, and for retrieving wrapping key labels. The label
> retrieval operation (H_PKS_GET_OBJECTLABELS) applies to all wrapping keys
> including the default one, while the life cycle operations
> (H_PKS_REVOKE_OBJECT/H_PKS_UNREVOKE_OBJECT) apply only to user-created
> wrapping keys.
> 
> Signed-off-by: Srish Srinivasan <ssrish at linux.ibm.com>

Sashiko has reviewed this patch and found no issues.

-- 
Sashiko AI review · https://sashiko.dev/#/patchset/20261018170844.491252-1-ssrish@linux.ibm.com?part=7




More information about the Linux-security-module-archive mailing list