Since I'm still stuck on this, I rebuilt the Debian kernel, patching
security/integrity/didsig.c round-about line 55 on Linux 4.12.2 to
add:
```
pr_err("XXX: type=%s name=%s\n", key_type_keyring, keyring_name[id]);
```
I see logs that look like:
```
integrity: XXX: type=_ima name=(null)
integrity: no _ima keyring: -126
```
That strikes me as weird. Seems like request_key would have wanted a
type of "keyring" or something, and a description of "_ima", not a
type of "_ima" and no description.
Does this rustle up any thoughts from anyone?
Paul
--
:wq
