diff options
| author | Coiby Xu <coxu@redhat.com> | 2022-07-14 21:40:25 +0800 |
|---|---|---|
| committer | Greg Kroah-Hartman <gregkh@linuxfoundation.org> | 2022-08-21 15:18:56 +0200 |
| commit | 8fd872cddf2a46f6d60e616832b7686d3f5fe40a (patch) | |
| tree | 8775e9653d7341d20a18d3b74ddd21b9f1c618ca /fs/ext2/namei.c | |
| parent | 3efab6d817d5a4f238c4e9c6ab908a4a23f99cf2 (diff) | |
| download | linux-stable-8fd872cddf2a46f6d60e616832b7686d3f5fe40a.tar.gz | |
kexec, KEYS: make the code in bzImage64_verify_sig generic
commit c903dae8941deb55043ee46ded29e84e97cd84bb upstream.
commit 278311e417be ("kexec, KEYS: Make use of platform keyring for
signature verify") adds platform keyring support on x86 kexec but not
arm64.
The code in bzImage64_verify_sig uses the keys on the
.builtin_trusted_keys, .machine, if configured and enabled,
.secondary_trusted_keys, also if configured, and .platform keyrings
to verify the signed kernel image as PE file.
Cc: kexec@lists.infradead.org
Cc: keyrings@vger.kernel.org
Cc: linux-security-module@vger.kernel.org
Reviewed-by: Michal Suchanek <msuchanek@suse.de>
Signed-off-by: Coiby Xu <coxu@redhat.com>
Signed-off-by: Mimi Zohar <zohar@linux.ibm.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Diffstat (limited to 'fs/ext2/namei.c')
0 files changed, 0 insertions, 0 deletions