Re: [PATCH v2] modsign: use all trusted keys to verify module signature

2018-11-07 Thread Jessica Yu
+++ Ke Wu [06/11/18 15:23 -0800]: Thanks for the comment! I switched to use VERIFY_USE_SECONDARY_KEYRING, please take a look. Patch has been queued on modules-next. Thanks! Jessica On Tue, Nov 6, 2018 at 3:21 PM Ke Wu wrote: Make mod_verify_sig to use all trusted keys. This allows keys in

Re: [PATCH v2] modsign: use all trusted keys to verify module signature

2018-11-06 Thread Ke Wu
Thanks for the comment! I switched to use VERIFY_USE_SECONDARY_KEYRING, please take a look. On Tue, Nov 6, 2018 at 3:21 PM Ke Wu wrote: > > Make mod_verify_sig to use all trusted keys. This allows keys in > secondary_trusted_keys to be used to verify PKCS#7 signature on a > kernel module. > > Sig