On Wed, Jan 20, 2016 at 01:15:47PM -0500, Mimi Zohar wrote: > Hi Greg, > > The concept of not being able to remove a key from a keyring was > introduced to prevent keys from being removed from the blacklist > keyring. The blacklist keyring was just upstreamed in the current open > window. I don't see a need to backport either this patch or the "KEYS: > refcount bug fix" patch. Ah, ok, remove this for all stable kernel trees, right? For some reason I thought this was resolving a different key security "issue" that was recently reported... thanks, greg k-h -- To unsubscribe from this list: send the line "unsubscribe stable" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html