From: Dmitry Kasatkin Date: Tue, 17 Jun 2014 08:56:58 +0000 (+0300) Subject: KEYS: validate certificate trust only with selected key X-Git-Tag: omap-for-v3.17/fixes-against-rc2~151^2~12^2~1^2~2 X-Git-Url: https://git.openpandora.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=ffb70f61bab1482a3bd0f85fd8f1e9c9909df2ca;p=pandora-kernel.git KEYS: validate certificate trust only with selected key Instead of allowing public keys, with certificates signed by any key on the system trusted keyring, to be added to a trusted keyring, this patch further restricts the certificates to those signed by a particular key on the system keyring. This patch defines a new kernel parameter 'ca_keys' to identify the specific key which must be used for trust validation of certificates. Simplified Mimi's "KEYS: define an owner trusted keyring" patch. Changelog: - support for builtin x509 public keys only - export "asymmetric_keyid_match" - remove ifndefs MODULE - rename kernel boot parameter from keys_ownerid to ca_keys Signed-off-by: Dmitry Kasatkin Signed-off-by: Mimi Zohar --- Reading git-diff-tree failed