Re: [PATCH 0/4] KEYS: validate key trust with owner and builtin keys only

David Howells
2014-06-27T14:16:42Z

Matthew Garrett <mjg59@srcf.ucam.org> wrote:

> Yes. Wouldn't having a mechanism to allow userspace to drop keys that
> have otherwise been imported be a generally useful solution to the issue
> you have with that?

"keyctl invalidate" could be a way to drop keys.

David