David Howells d3bfe84129 certs: Add a secondary system keyring that can be added to dynamically ...

Add a secondary system keyring that can be added to by root whilst the
system is running - provided the key being added is vouched for by a key
built into the kernel or already added to the secondary keyring.

Rename .system_keyring to .builtin_trusted_keys to distinguish it more
obviously from the new keyring (called .secondary_trusted_keys).

The new keyring needs to be enabled with CONFIG_SECONDARY_TRUSTED_KEYRING.

If the secondary keyring is enabled, a link is created from that to
.builtin_trusted_keys so that the the latter will automatically be searched
too if the secondary keyring is searched.

Signed-off-by: David Howells <dhowells@redhat.com>

2016-04-11 22:48:09 +01:00

..

.gitignore

certs: add .gitignore to stop git nagging about x509_certificate_list

2015-10-21 15:18:35 +01:00

Kconfig

certs: Add a secondary system keyring that can be added to dynamically

2016-04-11 22:48:09 +01:00

Makefile

modsign: hide openssl output in silent builds

2016-02-26 11:16:38 +00:00

system_certificates.S

certs: Fix misaligned data in extra certificate list

2016-02-29 14:44:30 +00:00

system_keyring.c

certs: Add a secondary system keyring that can be added to dynamically

2016-04-11 22:48:09 +01:00