Re: [PATCH v4 5/6] KEYS: CA link restriction

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Subject: Re: [PATCH v4 5/6] KEYS: CA link restriction
From: Mimi Zohar <zohar@xxxxxxxxxxxxx>
Date: Wed, 08 Feb 2023 21:55:37 -0500
Cc: herbert@xxxxxxxxxxxxxxxxxxx, davem@xxxxxxxxxxxxx, dmitry.kasatkin@xxxxxxxxx, paul@xxxxxxxxxxxxxx, jmorris@xxxxxxxxx, serge@xxxxxxxxxx, pvorel@xxxxxxx, tadeusz.struk@xxxxxxxxx, kanth.ghatraju@xxxxxxxxxx, konrad.wilk@xxxxxxxxxx, erpalmer@xxxxxxxxxxxxxxxxxx, coxu@xxxxxxxxxx, keyrings@xxxxxxxxxxxxxxx, linux-kernel@xxxxxxxxxxxxxxx, linux-crypto@xxxxxxxxxxxxxxx, linux-integrity@xxxxxxxxxxxxxxx, linux-security-module@xxxxxxxxxxxxxxx
In-reply-to: <20230207025958.974056-6-eric.snowberg@oracle.com>

On Mon, 2023-02-06 at 21:59 -0500, Eric Snowberg wrote:
> Add a new link restriction.  Restrict the addition of keys in a keyring
> based on the key to be added being a CA.
> 
> Signed-off-by: Eric Snowberg <eric.snowberg@xxxxxxxxxx>

Other than expanding the patch description to mention the keyUsage,

Reviewed-by: Mimi Zohar <zohar@xxxxxxxxxxxxx>

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

References:
- [PATCH v4 0/6] Add CA enforcement keyring restrictions
  - From: Eric Snowberg
- [PATCH v4 5/6] KEYS: CA link restriction
  - From: Eric Snowberg

Prev by Date: Re: [PATCH v4 0/6] Add CA enforcement keyring restrictions
Next by Date: Re: [RFC PATCH v9 12/16] fsverity: consume builtin signature via LSM hook
Previous by thread: [PATCH v4 5/6] KEYS: CA link restriction
Next by thread: [PATCH v4 1/6] KEYS: Create static version of public_key_verify_signature
Index(es):
- Date
- Thread

[Index of Archives] [Linux Kernel] [Linux Kernel Hardening] [Linux NFS] [Linux NILFS] [Linux USB Devel] [Video for Linux] [Linux Audio Users] [Yosemite News] [Linux SCSI]

Powered by Linux