On Fri, 2021-01-29 at 01:56 +0200, jarkko@xxxxxxxxxx wrote:
> From: Jarkko Sakkinen <jarkko@xxxxxxxxxx>
>
> Consider the following transcript:
>
> $ keyctl add trusted kmk "new 32 blobauth=helloworld keyhandle=80000000 migratable=1" @u
> add_key: Invalid argument
>
> The documentation has the following description:
>
> migratable= 0|1 indicating permission to reseal to new PCR values,
> default 1 (resealing allowed)
>
> The consequence is that "migratable=1" should succeed. Fix this by
> allowing this condition to pass instead of return -EINVAL.
>
> [*] Documentation/security/keys/trusted-encrypted.rst
>
> Cc: stable@xxxxxxxxxxxxxxx
> Cc: "James E.J. Bottomley" <jejb@xxxxxxxxxxxxx>
> Cc: Mimi Zohar <zohar@xxxxxxxxxxxxx>
> Cc: David Howells <dhowells@xxxxxxxxxx>
> Fixes: d00a1c72f7f4 ("keys: add new trusted key-type")
> Signed-off-by: Jarkko Sakkinen <jarkko@xxxxxxxxxx>
thanks,
Reviewed-by: Mimi Zohar <zohar@xxxxxxxxxxxxx>
