From mboxrd@z Thu Jan 1 00:00:00 1970 From: Mimi Zohar Date: Thu, 25 Apr 2019 11:55:50 +0000 Subject: Re: [PATCH v2] KEYS: Make use of platform keyring for module signature verify Message-Id: <1556193350.3894.92.camel@linux.ibm.com> MIME-Version: 1.0 Content-Type: text/plain; charset="maccentraleurope" Content-Transfer-Encoding: base64 List-Id: References: <1556116431-7129-1-git-send-email-robeholmes@gmail.com> In-Reply-To: <1556116431-7129-1-git-send-email-robeholmes@gmail.com> To: Robert Holmes , jeyu@kernel.org, linux-kernel@vger.kernel.org Cc: linux-integrity@vger.kernel.org, keyrings@vger.kernel.org, stable@vger.kernel.org T24gV2VkLCAyMDE5LTA0LTI0IGF0IDE0OjMzICswMDAwLCBSb2JlcnQgSG9sbWVzIHdyb3RlOgo+ IFRoaXMgcGF0Y2ggY29tcGxldGVzIGNvbW1pdCAyNzgzMTFlNDE3YmUgKCJrZXhlYywgS0VZUzog TWFrZSB1c2Ugb2YKPiBwbGF0Zm9ybSBrZXlyaW5nIGZvciBzaWduYXR1cmUgdmVyaWZ5Iikgd2hp Y2gsIHdoaWxlIGFkZGluZyB0aGUKPiBwbGF0Zm9ybSBrZXlyaW5nIGZvciBiekltYWdlIHZlcmlm aWNhdGlvbiwgbmVnbGVjdGVkIHRvIGFsc28gYWRkCj4gdGhpcyBrZXlyaW5nIGZvciBtb2R1bGUg dmVyaWZpY2F0aW9uLgo+IAo+IEFzIHN1Y2gsIGtlcm5lbCBtb2R1bGVzIHNpZ25lZCB3aXRoIGtl eXMgZnJvbSB0aGUgTW9rTGlzdCB2YXJpYWJsZQo+IHdlcmUgbm90IHN1Y2Nlc3NmdWxseSB2ZXJp ZmllZC4KClVzaW5nIHRoZSBwbGF0Zm9ybSBrZXlyaW5nIGtleXMgZm9yIHZlcmlmeWluZyBrZXJu ZWwgbW9kdWxlcyB3YXMgbm90Cm5lZ2xlY3RlZCwgYnV0IHJhdGhlciBpbnRlbnRpb25hbC4gwqBU aGlzIHBhdGNoIGRlc2NyaXB0aW9uIHNob3VsZApjbGVhcmx5IGV4cGxhaW4gdGhlIHJlYXNvbiBm b3IgbmVlZGluZyB0byB2ZXJpZnkga2VybmVsIG1vZHVsZQpzaWduYXR1cmVzIGJhc2VkIG9uIHRo ZSBwcmUtYm9vdCBrZXlzLiDCoChIaW50OiB2ZXJpZnlpbmcga2VybmVsCm1vZHVsZXMgYmFzZWQg b24gdGhlIHByZS1ib290IGtleXMgd2FzIHByZXZpb3VzbHkgcmVqZWN0ZWQuKQoKTWltaQoKPiAK PiBTaWduZWQtb2ZmLWJ5OiBSb2JlcnQgSG9sbWVzIDxyb2JlaG9sbWVzQGdtYWlsLmNvbT4KPiBD YzogbGludXgtaW50ZWdyaXR5QHZnZXIua2VybmVsLm9yZwo+IENjOiBrZXlyaW5nc0B2Z2VyLmtl cm5lbC5vcmcKPiBDYzogc3RhYmxlQHZnZXIua2VybmVsLm9yZwo+IC0tLQo+ICBrZXJuZWwvbW9k dWxlX3NpZ25pbmcuYyB8IDE2ICsrKysrKysrKysrKy0tLS0KPiAgMSBmaWxlIGNoYW5nZWQsIDEy IGluc2VydGlvbnMoKyksIDQgZGVsZXRpb25zKC0pCj4gCj4gZGlmZiAtLWdpdCBhL2tlcm5lbC9t b2R1bGVfc2lnbmluZy5jIGIva2VybmVsL21vZHVsZV9zaWduaW5nLmMKPiBpbmRleCA2YjlhOTI2 ZmQ4NmIuLmNmOTQyMjBlOTE1NCAxMDA2NDQKPiAtLS0gYS9rZXJuZWwvbW9kdWxlX3NpZ25pbmcu Ywo+ICsrKyBiL2tlcm5lbC9tb2R1bGVfc2lnbmluZy5jCj4gQEAgLTQ5LDYgKzQ5LDcgQEAgaW50 IG1vZF92ZXJpZnlfc2lnKGNvbnN0IHZvaWQgKm1vZCwgc3RydWN0IGxvYWRfaW5mbyAqaW5mbykK PiAgewo+ICAJc3RydWN0IG1vZHVsZV9zaWduYXR1cmUgbXM7Cj4gIAlzaXplX3Qgc2lnX2xlbiwg bW9kbGVuID0gaW5mby0+bGVuOwo+ICsJaW50IHJldDsKPiAKPiAgCXByX2RldmVsKCI9PiVzKCwl enUpXG4iLCBfX2Z1bmNfXywgbW9kbGVuKTsKPiAKPiBAQCAtODIsOCArODMsMTUgQEAgaW50IG1v ZF92ZXJpZnlfc2lnKGNvbnN0IHZvaWQgKm1vZCwgc3RydWN0IGxvYWRfaW5mbyAqaW5mbykKPiAg CQlyZXR1cm4gLUVCQURNU0c7Cj4gIAl9Cj4gCj4gLQlyZXR1cm4gdmVyaWZ5X3BrY3M3X3NpZ25h dHVyZShtb2QsIG1vZGxlbiwgbW9kICsgbW9kbGVuLCBzaWdfbGVuLAo+IC0JCQkJICAgICAgVkVS SUZZX1VTRV9TRUNPTkRBUllfS0VZUklORywKPiAtCQkJCSAgICAgIFZFUklGWUlOR19NT0RVTEVf U0lHTkFUVVJFLAo+IC0JCQkJICAgICAgTlVMTCwgTlVMTCk7Cj4gKwlyZXQgPSB2ZXJpZnlfcGtj czdfc2lnbmF0dXJlKG1vZCwgbW9kbGVuLCBtb2QgKyBtb2RsZW4sIHNpZ19sZW4sCj4gKwkJCQkg ICAgIFZFUklGWV9VU0VfU0VDT05EQVJZX0tFWVJJTkcsCj4gKwkJCQkgICAgIFZFUklGWUlOR19N T0RVTEVfU0lHTkFUVVJFLAo+ICsJCQkJICAgICBOVUxMLCBOVUxMKTsKPiArCWlmIChyZXQgPSAt RU5PS0VZICYmIElTX0VOQUJMRUQoQ09ORklHX0lOVEVHUklUWV9QTEFURk9STV9LRVlSSU5HKSkg ewo+ICsJCXJldCA9IHZlcmlmeV9wa2NzN19zaWduYXR1cmUobW9kLCBtb2RsZW4sIG1vZCArIG1v ZGxlbiwgc2lnX2xlbiwKPiArCQkJCQkgICAgIFZFUklGWV9VU0VfUExBVEZPUk1fS0VZUklORywK PiArCQkJCQkgICAgIFZFUklGWUlOR19NT0RVTEVfU0lHTkFUVVJFLAo+ICsJCQkJCSAgICAgTlVM TCwgTlVMTCk7Cj4gKwl9Cj4gKwlyZXR1cm4gcmV0Owo+ICB9Cg==