Dmitry Kasatkin f4dc37785e integrity: define '.evm' as a builtin 'trusted' keyring ... Require all keys added to the EVM keyring be signed by an existing trusted key on the system trusted keyring. This patch also switches IMA to use integrity_init_keyring(). Changes in v3: * Added 'init_keyring' config based variable to skip initializing keyring instead of using __integrity_init_keyring() wrapper. * Added dependency back to CONFIG_IMA_TRUSTED_KEYRING Changes in v2: * Replace CONFIG_EVM_TRUSTED_KEYRING with IMA and EVM common CONFIG_INTEGRITY_TRUSTED_KEYRING configuration option * Deprecate CONFIG_IMA_TRUSTED_KEYRING but keep it for config file compatibility. (Mimi Zohar) Signed-off-by: Dmitry Kasatkin <dmitry.kasatkin@huawei.com> Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>		2015-11-23 14:30:02 -05:00
..
evm	integrity: define '.evm' as a builtin 'trusted' keyring	2015-11-23 14:30:02 -05:00
ima	integrity: define '.evm' as a builtin 'trusted' keyring	2015-11-23 14:30:02 -05:00
digsig_asymmetric.c	integrity: do zero padding of the key id	2014-10-06 17:33:27 +01:00
digsig.c	integrity: define '.evm' as a builtin 'trusted' keyring	2015-11-23 14:30:02 -05:00
iint.c	integrity: add validity checks for 'path' parameter	2015-05-21 13:59:28 -04:00
integrity_audit.c	Merge git://git.infradead.org/users/eparis/audit	2014-04-12 12:38:53 -07:00
integrity.h	integrity: define '.evm' as a builtin 'trusted' keyring	2015-11-23 14:30:02 -05:00
Kconfig	integrity: define '.evm' as a builtin 'trusted' keyring	2015-11-23 14:30:02 -05:00
Makefile	integrity: make integrity files as 'integrity' module	2014-09-09 10:28:58 -04:00