From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from mail-qt1-f174.google.com (mail-qt1-f174.google.com [209.85.160.174]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id B7B3E352C2B for ; Wed, 13 May 2026 18:36:03 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=209.85.160.174 ARC-Seal:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1778697366; cv=none; b=uzBnPq/wrNfUrY+J3jdM/BX0U2dbY2neKOXzD9CyIlPo3aW9CbsEof1zE8CPlZ/BnwDeaMS1CWiMwBqEDuLOMw4Flt7nSJXI6AzHoVjfhPPwYo+pTzKjUNQNH6ah0XaXFR09U6FALZBX2CQnXlnwgYb7B2/n56DtYH2pip6wNe0= ARC-Message-Signature:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1778697366; c=relaxed/simple; bh=yqydc2BAvs/EEy/vMFDPydcYDh+gc6ICoo3g/wT4z8M=; h=Date:Message-ID:MIME-Version:Content-Type:From:To:Subject: References:In-Reply-To; b=urleWDyvLfWbFrKntm0NzDRDJrnxW4wI9XRdEmXKd467pfXC+XdycF8OEPSiMNuDAk3us73Iuk71L59hXYDjCUpcszK3ci9E3jFQ3r5RiPDxiNIE4gSUWOxBE7BRa6c/gxVrss8121uRfj01ggDxcuO5j761suHOb1b97eBWaL8= ARC-Authentication-Results:i=1; smtp.subspace.kernel.org; dmarc=pass (p=none dis=none) header.from=paul-moore.com; spf=pass smtp.mailfrom=paul-moore.com; dkim=pass (2048-bit key) header.d=paul-moore.com header.i=@paul-moore.com header.b=Ef+MNUdg; arc=none smtp.client-ip=209.85.160.174 Authentication-Results: smtp.subspace.kernel.org; dmarc=pass (p=none dis=none) header.from=paul-moore.com Authentication-Results: smtp.subspace.kernel.org; spf=pass smtp.mailfrom=paul-moore.com Authentication-Results: smtp.subspace.kernel.org; dkim=pass (2048-bit key) header.d=paul-moore.com header.i=@paul-moore.com header.b="Ef+MNUdg" Received: by mail-qt1-f174.google.com with SMTP id d75a77b69052e-50fb18c55beso72498851cf.2 for ; Wed, 13 May 2026 11:36:03 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=paul-moore.com; s=google; t=1778697363; x=1779302163; darn=vger.kernel.org; h=in-reply-to:references:subject:to:from:content-transfer-encoding :mime-version:message-id:date:from:to:cc:subject:date:message-id :reply-to; bh=aQ2lrl+/gKDcPyuGztAL7xFoyeibd4FccB/Ub7cgd0c=; b=Ef+MNUdg2cj68iOeUx6W6u5nft19c9Bx8d31j7AN3WybWxNHZBb6dan2SqkNlVXciP Rbh3XdOv6EcXFPhbjOXlFJQg4RASegCNS6fiX35hq4YDmPc9DD1j0t8dcKFrbcPPlwNV kVy83zVUPu8M9skQHx3H0MKHLsULiQ88MjIerFZQile5SP/YeSExIhjHindyS+CNmTuP lhXjJo17EHoJ0/2lx7J90ZH2pHXasPeLJyzy2X3qK3FjSF3JJsfo8i2N9EHVbE9VIsDT Jx4cZGLBAcVUmRjrZ+iqVRWmq2sDmlZAvdXVDhKeP/5/u8qp2+OQOIOUYSjHuIQr8GCR qmTw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1778697363; x=1779302163; h=in-reply-to:references:subject:to:from:content-transfer-encoding :mime-version:message-id:date:x-gm-gg:x-gm-message-state:from:to:cc :subject:date:message-id:reply-to; bh=aQ2lrl+/gKDcPyuGztAL7xFoyeibd4FccB/Ub7cgd0c=; b=aRfAOQZRs7XMO3Ws40EDWO7i03cn0WIgM1zJcnjNghb22ASiCZy5XWG25MRuo8TSiL zdVuE3DCgLr/I1Qzd74r5ynqEcTpNztLGP+1DqKmQPel3T7+d/rcQN7uYFgZ391yk4y/ aLfomHE6l5H0Daq/HCUh7gPkj/tX15VIE0H4EwwYw21PBL9LxkcnvBSBrL7G7GFYBcgC H46tmZ5hp39+mzIO6bQzDdl8HKzWPinPgUZAMtV+qJPYXHCjFG4dtD+QTIEYW4bD/DBT Dfo2Xk5mXa92aajkT93jW3uIwyKGr/uyICrPnYe8zdR0+Kf5rLc6RTpULi0lp3VvT9FS uVrg== X-Forwarded-Encrypted: i=1; AFNElJ9DKQBrrfjrLaQoKdHnt3vhp+kxRyRp0JuF1nQKm9qTUy0LhidvY/h8wQlmGVebmu/JxolzwBN8+qXcEb0=@vger.kernel.org X-Gm-Message-State: AOJu0Yw92kxOeMLk74L9QKG7X2gWRtUW7SkLL+jQzWxbXUDYy0/oubWQ BmbnLICtTkrg/HbrAYnHH2Ftw5AQQhabkpTPDZXfyfk1JaVYfCkE+Tsj4/5EdEEJ32BAvM4/Lce 4pxU= X-Gm-Gg: Acq92OFqvj+CIy1drs16XM+Sk/WKgEDYaSq6xO8ZW+KjsXwdlpqtlqaGUlwV3a8XhWW jKM/haQCNSeZBOLnCCoXn2qEpPqunuQ96Rf6lFZvzw3zTtVzsB+ucNsEeQQGlU3sUw7QkqVn7OZ h4aZknyr4MsvLkYumLjyI8nREeN41Bm9YKXPiSraO1MSumUjRYtb2Yfk+VHE+rAncnakzLdS/6e DZzLx9ympVnhuhPpsiqhQa//WeRH8wEHcMSBwQ3bkjzPVnjzFDE+4M7NpBNnEfSVe1hbtTPK3al qdhKIgXrhHTEf0QYi5kjhNMV1vcZlTsfb+KRdcRv/4miX70ipAWwNPzRofd8pbB418eP0dVVfP+ YSMUHMTl6ror04FV1ySmLbAF2KfclLlReaN69KLaZJA2TgM7ceV4jZL5x/Z5QUwkmO7lwK3sC8e sNTS6Nx2GVo1ISZoZ8Hk5BSRUbSYXI8PvWFMfJuVwYV09t32lUjKFjaWvimNHmxAh4g9OX X-Received: by 2002:a05:622a:5:b0:509:965f:888f with SMTP id d75a77b69052e-5162f2a4b4dmr62133441cf.0.1778697362725; Wed, 13 May 2026 11:36:02 -0700 (PDT) Received: from localhost (pool-71-126-255-178.bstnma.fios.verizon.net. [71.126.255.178]) by smtp.gmail.com with ESMTPSA id d75a77b69052e-5148e82579fsm151609761cf.24.2026.05.13.11.36.01 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 13 May 2026 11:36:01 -0700 (PDT) Date: Wed, 13 May 2026 14:36:01 -0400 Message-ID: Precedence: bulk X-Mailing-List: linux-kernel@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit X-Mailer: pstg-pwork:20260512_1604/pstg-lib:20260513_1343/pstg-pwork:20260512_1604 From: Paul Moore To: Blaise Boscaccy , "Blaise Boscaccy" , "Jonathan Corbet" , "" , "James Morris" , "Serge E. Hallyn" , =?UTF-8?q?Micka=C3=ABl=20Sala=C3=BCn?= , =?UTF-8?q?G=C3=BCnther=20Noack?= , "Dr. David Alan Gilbert" , "Andrew Morton" , James.Bottomley@HansenPartnership.com, dhowells@redhat.com, "Fan Wu" , "Ryan Foster" , "Randy Dunlap" , linux-security-module@vger.kernel.org, linux-doc@vger.kernel.org, linux-kernel@vger.kernel.org, bpf@vger.kernel.org, "Song Liu" Subject: Re: [PATCH v7 1/10] crypto: pkcs7: add flag for validated trust on a signed info block References: <20260507191416.2984054-2-bboscaccy@linux.microsoft.com> In-Reply-To: <20260507191416.2984054-2-bboscaccy@linux.microsoft.com> On May 7, 2026 Blaise Boscaccy wrote: > > Allow consumers of struct pkcs7_message to tell if any of the sinfo > fields has passed a trust validation. Note that this does not happen > in parsing, pkcs7_validate_trust() must be explicitly called or called > via validate_pkcs7_trust(). Since the way to get this trusted pkcs7 > object is via verify_pkcs7_message_sig, export that so modules can use > it. > > Signed-off-by: James Bottomley > Signed-off-by: Blaise Boscaccy > --- > certs/system_keyring.c | 1 + > crypto/asymmetric_keys/pkcs7_parser.h | 1 + > crypto/asymmetric_keys/pkcs7_trust.c | 1 + > 3 files changed, 3 insertions(+) Merged into lsm/dev, thanks. -- paul-moore.com