Eric Snowberg 90f6f691a7 integrity: Enforce digitalSignature usage in the ima and evm keyrings ...

After being vouched for by a system keyring, only allow keys into the .ima
and .evm keyrings that have the digitalSignature usage field set.

Link: https://lore.kernel.org/all/41dffdaeb7eb7840f7e38bc691fbda836635c9f9.camel@linux.ibm.com
Suggested-by: Mimi Zohar <zohar@linux.ibm.com>
Signed-off-by: Eric Snowberg <eric.snowberg@oracle.com>
Acked-and-tested-by: Mimi Zohar <zohar@linux.ibm.com>
Reviewed-by: Jarkko Sakkinen <jarkko@kernel.org>
Signed-off-by: Jarkko Sakkinen <jarkko@kernel.org>

2023-08-17 20:12:35 +00:00

..

evm_crypto.c

evm: Fix build warnings

2023-06-06 08:51:11 -04:00

evm_main.c

evm: Fix build warnings

2023-06-06 08:51:11 -04:00

evm_posix_acl.c

treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 441

2019-06-05 17:37:17 +02:00

evm_secfs.c

fs: port ->setattr() to pass mnt_idmap

2023-01-19 09:24:02 +01:00

evm.h

evm: Clean up some variables

2022-05-16 08:14:38 -04:00

Kconfig

integrity: Enforce digitalSignature usage in the ima and evm keyrings

2023-08-17 20:12:35 +00:00

Makefile

treewide: Add SPDX license identifier - Makefile/Kconfig

2019-05-21 10:50:46 +02:00