diff options
| author | Luca Boccassi <[email protected]> | 2024-09-22 18:17:53 +0200 |
|---|---|---|
| committer | Mikulas Patocka <[email protected]> | 2024-09-26 17:27:08 +0200 |
| commit | 579b2ba40ece57f3f9150f59dfe327e60a5445b5 (patch) | |
| tree | 83779bcb961c69aa71605a7abe6cad6745d044c6 /mm/sparse.c | |
| parent | e6a3531dd542cb127c8de32ab1e54a48ae19962b (diff) | |
dm verity: fallback to platform keyring also if key in trusted keyring is rejected
If enabled, we fallback to the platform keyring if the trusted keyring doesn't have
the key used to sign the roothash. But if pkcs7_verify() rejects the key for other
reasons, such as usage restrictions, we do not fallback. Do so.
Follow-up for 6fce1f40e95182ebbfe1ee3096b8fc0b37903269
Suggested-by: Serge Hallyn <[email protected]>
Signed-off-by: Luca Boccassi <[email protected]>
Acked-by: Jarkko Sakkinen <[email protected]>
Signed-off-by: Mikulas Patocka <[email protected]>
Diffstat (limited to 'mm/sparse.c')
0 files changed, 0 insertions, 0 deletions