[PATCH 0/3] keys: Add well known IDs for fs-verity/dm-verity keys
Andrew Halaney
andrew at amutable.com
Mon Sep 14 16:41:41 UTC 2026
This more or less follows the bpf keyring approach, allowing userspace
to easily find the keys instead of having to parse /proc/keys.
Signed-off-by: Andrew Halaney <andrew at amutable.com>
---
Andrew Halaney (3):
keys: add KEY_SPEC_DM_VERITY_KEYRING
keys: add KEY_SPEC_FS_VERITY_KEYRING
Documentation: keys: document IDs added since KEY_SPEC_REQKEY_AUTH_KEY
Documentation/security/keys/core.rst | 13 ++++++++
drivers/md/dm-verity-verify-sig.c | 3 ++
fs/verity/signature.c | 2 ++
include/linux/key.h | 2 ++
include/uapi/linux/keyctl.h | 2 ++
security/keys/process_keys.c | 58 ++++++++++++++++++++++++++++++++++++
6 files changed, 80 insertions(+)
---
base-commit: 1a1de54f7369cd2b5bac0f265910e60ad3a6b4c3
change-id: 20260914-ajhalaney-dmverity-key-identifier-4187b6233be5
Best regards,
--
Andrew Halaney <andrew at amutable.com>
More information about the Linux-security-module-archive
mailing list