diff for duplicates of <1548171458.4038.3.camel@linux.ibm.com> diff --git a/a/1.txt b/N1/1.txt index 183ae5c..51967e1 100644 --- a/a/1.txt +++ b/N1/1.txt @@ -36,7 +36,7 @@ Reviewed/Tested-by: Mimi Zohar <zohar@linux.ibm.com> > + ret = verify_pefile_signature(kernel, kernel_len, > + VERIFY_USE_SECONDARY_KEYRING, > + VERIFYING_KEXEC_PE_SIGNATURE); -> + if (ret == -ENOKEY && IS_ENABLED(CONFIG_INTEGRITY_PLATFORM_KEYRING)) { +> + if (ret = -ENOKEY && IS_ENABLED(CONFIG_INTEGRITY_PLATFORM_KEYRING)) { > + ret = verify_pefile_signature(kernel, kernel_len, > + VERIFY_USE_PLATFORM_KEYRING, > + VERIFYING_KEXEC_PE_SIGNATURE); @@ -53,7 +53,7 @@ Reviewed/Tested-by: Mimi Zohar <zohar@linux.ibm.com> > #else > trusted_keys = builtin_trusted_keys; > #endif -> + } else if (trusted_keys == VERIFY_USE_PLATFORM_KEYRING) { +> + } else if (trusted_keys = VERIFY_USE_PLATFORM_KEYRING) { > +#ifdef CONFIG_INTEGRITY_PLATFORM_KEYRING > + trusted_keys = platform_trusted_keys; > +#else @@ -67,7 +67,7 @@ Reviewed/Tested-by: Mimi Zohar <zohar@linux.ibm.com> > } > ret = pkcs7_validate_trust(pkcs7, trusted_keys); > if (ret < 0) { -> if (ret == -ENOKEY) +> if (ret = -ENOKEY) > - pr_err("PKCS#7 signature not signed with a trusted key\n"); > + pr_devel("PKCS#7 signature not signed with a trusted key\n"); > goto error; @@ -85,9 +85,3 @@ Reviewed/Tested-by: Mimi Zohar <zohar@linux.ibm.com> > > /* > * The use to which an asymmetric key is being put. - - -_______________________________________________ -kexec mailing list -kexec@lists.infradead.org -http://lists.infradead.org/mailman/listinfo/kexec diff --git a/a/content_digest b/N1/content_digest index c9cfd66..715c5dd 100644 --- a/a/content_digest +++ b/N1/content_digest @@ -2,21 +2,21 @@ "ref\020190121095929.26915-3-kasong@redhat.com\0" "From\0Mimi Zohar <zohar@linux.ibm.com>\0" "Subject\0Re: [PATCH v5 2/2] kexec, KEYS: Make use of platform keyring for signature verify\0" - "Date\0Tue, 22 Jan 2019 10:37:38 -0500\0" + "Date\0Tue, 22 Jan 2019 15:37:38 +0000\0" "To\0Kairui Song <kasong@redhat.com>" " linux-kernel@vger.kernel.org\0" - "Cc\0jwboyer@fedoraproject.org" + "Cc\0dhowells@redhat.com" + dwmw2@infradead.org + jwboyer@fedoraproject.org + keyrings@vger.kernel.org + jmorris@namei.org + serge@hallyn.com + bauerman@linux.ibm.com ebiggers@google.com - dyoung@redhat.com nayna@linux.ibm.com - kexec@lists.infradead.org - jmorris@namei.org - dhowells@redhat.com - keyrings@vger.kernel.org + dyoung@redhat.com linux-integrity@vger.kernel.org - dwmw2@infradead.org - bauerman@linux.ibm.com - " serge@hallyn.com\0" + " kexec@lists.infradead.org\0" "\00:1\0" "b\0" "On Mon, 2019-01-21 at 17:59 +0800, Kairui Song wrote:\n" @@ -57,7 +57,7 @@ "> +\tret = verify_pefile_signature(kernel, kernel_len,\n" "> +\t\t\t\t VERIFY_USE_SECONDARY_KEYRING,\n" "> +\t\t\t\t VERIFYING_KEXEC_PE_SIGNATURE);\n" - "> +\tif (ret == -ENOKEY && IS_ENABLED(CONFIG_INTEGRITY_PLATFORM_KEYRING)) {\n" + "> +\tif (ret = -ENOKEY && IS_ENABLED(CONFIG_INTEGRITY_PLATFORM_KEYRING)) {\n" "> +\t\tret = verify_pefile_signature(kernel, kernel_len,\n" "> +\t\t\t\t\t VERIFY_USE_PLATFORM_KEYRING,\n" "> +\t\t\t\t\t VERIFYING_KEXEC_PE_SIGNATURE);\n" @@ -74,7 +74,7 @@ "> #else\n" "> \t\ttrusted_keys = builtin_trusted_keys;\n" "> #endif\n" - "> +\t} else if (trusted_keys == VERIFY_USE_PLATFORM_KEYRING) {\n" + "> +\t} else if (trusted_keys = VERIFY_USE_PLATFORM_KEYRING) {\n" "> +#ifdef CONFIG_INTEGRITY_PLATFORM_KEYRING\n" "> +\t\ttrusted_keys = platform_trusted_keys;\n" "> +#else\n" @@ -88,7 +88,7 @@ "> \t}\n" "> \tret = pkcs7_validate_trust(pkcs7, trusted_keys);\n" "> \tif (ret < 0) {\n" - "> \t\tif (ret == -ENOKEY)\n" + "> \t\tif (ret = -ENOKEY)\n" "> -\t\t\tpr_err(\"PKCS#7 signature not signed with a trusted key\\n\");\n" "> +\t\t\tpr_devel(\"PKCS#7 signature not signed with a trusted key\\n\");\n" "> \t\tgoto error;\n" @@ -105,12 +105,6 @@ "> +#define VERIFY_USE_PLATFORM_KEYRING ((struct key *)2UL)\n" "> \n" "> /*\n" - "> * The use to which an asymmetric key is being put.\n" - "\n" - "\n" - "_______________________________________________\n" - "kexec mailing list\n" - "kexec@lists.infradead.org\n" - http://lists.infradead.org/mailman/listinfo/kexec + > * The use to which an asymmetric key is being put. -c4960de32f5e9bb705454fa454dfb78136352d97c7ed00e0ff050b736a820bfd +bef3a48a03d853fb98734d87cd9ac88cdb5a84483eb576e37fb84f5a6b69eab4
diff --git a/a/1.txt b/N2/1.txt index 183ae5c..79246fe 100644 --- a/a/1.txt +++ b/N2/1.txt @@ -85,9 +85,3 @@ Reviewed/Tested-by: Mimi Zohar <zohar@linux.ibm.com> > > /* > * The use to which an asymmetric key is being put. - - -_______________________________________________ -kexec mailing list -kexec@lists.infradead.org -http://lists.infradead.org/mailman/listinfo/kexec diff --git a/a/content_digest b/N2/content_digest index c9cfd66..4645c4c 100644 --- a/a/content_digest +++ b/N2/content_digest @@ -5,18 +5,18 @@ "Date\0Tue, 22 Jan 2019 10:37:38 -0500\0" "To\0Kairui Song <kasong@redhat.com>" " linux-kernel@vger.kernel.org\0" - "Cc\0jwboyer@fedoraproject.org" + "Cc\0dhowells@redhat.com" + dwmw2@infradead.org + jwboyer@fedoraproject.org + keyrings@vger.kernel.org + jmorris@namei.org + serge@hallyn.com + bauerman@linux.ibm.com ebiggers@google.com - dyoung@redhat.com nayna@linux.ibm.com - kexec@lists.infradead.org - jmorris@namei.org - dhowells@redhat.com - keyrings@vger.kernel.org + dyoung@redhat.com linux-integrity@vger.kernel.org - dwmw2@infradead.org - bauerman@linux.ibm.com - " serge@hallyn.com\0" + " kexec@lists.infradead.org\0" "\00:1\0" "b\0" "On Mon, 2019-01-21 at 17:59 +0800, Kairui Song wrote:\n" @@ -105,12 +105,6 @@ "> +#define VERIFY_USE_PLATFORM_KEYRING ((struct key *)2UL)\n" "> \n" "> /*\n" - "> * The use to which an asymmetric key is being put.\n" - "\n" - "\n" - "_______________________________________________\n" - "kexec mailing list\n" - "kexec@lists.infradead.org\n" - http://lists.infradead.org/mailman/listinfo/kexec + > * The use to which an asymmetric key is being put. -c4960de32f5e9bb705454fa454dfb78136352d97c7ed00e0ff050b736a820bfd +aba7bfd9ca0c16aca0f16861778fdba0f97b23357515c34c57d38288e0c678f0
This is an external index of several public inboxes, see mirroring instructions on how to clone and mirror all data and code used by this external index.