kernel-ark/certs
David Howells d3bfe84129 certs: Add a secondary system keyring that can be added to dynamically
Add a secondary system keyring that can be added to by root whilst the
system is running - provided the key being added is vouched for by a key
built into the kernel or already added to the secondary keyring.

Rename .system_keyring to .builtin_trusted_keys to distinguish it more
obviously from the new keyring (called .secondary_trusted_keys).

The new keyring needs to be enabled with CONFIG_SECONDARY_TRUSTED_KEYRING.

If the secondary keyring is enabled, a link is created from that to
.builtin_trusted_keys so that the the latter will automatically be searched
too if the secondary keyring is searched.

Signed-off-by: David Howells <dhowells@redhat.com>
2016-04-11 22:48:09 +01:00
..
.gitignore certs: add .gitignore to stop git nagging about x509_certificate_list 2015-10-21 15:18:35 +01:00
Kconfig certs: Add a secondary system keyring that can be added to dynamically 2016-04-11 22:48:09 +01:00
Makefile modsign: hide openssl output in silent builds 2016-02-26 11:16:38 +00:00
system_certificates.S certs: Fix misaligned data in extra certificate list 2016-02-29 14:44:30 +00:00
system_keyring.c certs: Add a secondary system keyring that can be added to dynamically 2016-04-11 22:48:09 +01:00