Re: [PATCH 0/4] KEYS: validate key trust with owner and builtin keys only

Mimi Zohar
2014-06-11T12:30:34Z

On Wed, 2014-06-11 at 04:23 +0100, Matthew Garrett wrote:
> Yes. Wouldn't having a mechanism to allow userspace to drop keys that
> have otherwise been imported be a generally useful solution to the issue
> you have with that?

There are issues removing a key from both the local system(eg. cache,
running apps) and the attestation server (eg. ima-sig template
verification) perspectives. We would need to address these concerns
before supporting key removal.

Mimi