2 Commits

Author	SHA1	Message	Date
David Howells	008643b86c	KEYS: Add a 'trusted' flag and a 'trusted only' flag ... Add KEY_FLAG_TRUSTED to indicate that a key either comes from a trusted source or had a cryptographic signature chain that led back to a trusted key the kernel already possessed. Add KEY_FLAGS_TRUSTED_ONLY to indicate that a keyring will only accept links to keys marked with KEY_FLAGS_TRUSTED. Signed-off-by: David Howells <dhowells@redhat.com> Reviewed-by: Kees Cook <keescook@chromium.org>	2013-09-25 17:17:01 +01:00
David Howells	b56e5a17b6	KEYS: Separate the kernel signature checking keyring from module signing ... Separate the kernel signature checking keyring from module signing so that it can be used by code other than the module-signing code. Signed-off-by: David Howells <dhowells@redhat.com>	2013-09-25 17:17:01 +01:00