On 1/8/20 8:52 PM, Mimi Zohar wrote:
For the time being, I've pushed out this patch with the existing patch description to next-integrity-testing, but the patch description should be rewritten clearer. For example, As a result of the asymmetric public keys subtype being defined as a tristate, with the existing IMA Makefile, ima_asymmetric_keys.c could be built as a kernel module. To prevent this from happening, this patch defines and uses an intermediate Kconfig boolean option named IMA_MEASURE_ASYMMETRIC_KEYS. Please let me know if you're ok with this wording. thanks, Mimi
That sounds perfect. Thanks for your help Mimi. -lakshmi
