diff options
| author | Luca Boccassi <[email protected]> | 2024-09-27 10:23:44 +0200 |
|---|---|---|
| committer | Fan Wu <[email protected]> | 2024-10-18 12:14:53 -0700 |
| commit | f40998a8e6bbf0314b8416350183a537f9b59ca9 (patch) | |
| tree | 809dbfcdc3e1e76f035ad63b5a44b7d1989aa8a7 /tools/testing/selftests/bpf/prog_tests/prog_array_init.c | |
| parent | 02e2f9aa33e461468de02e35ad977bd7233960ae (diff) | |
ipe: fallback to platform keyring also if key in trusted keyring is rejected
If enabled, we fallback to the platform keyring if the trusted keyring
doesn't have the key used to sign the ipe policy. But if pkcs7_verify()
rejects the key for other reasons, such as usage restrictions, we do not
fallback. Do so, following the same change in dm-verity.
Signed-off-by: Luca Boccassi <[email protected]>
Suggested-by: Serge Hallyn <[email protected]>
[FW: fixed some line length issues and a typo in the commit message]
Signed-off-by: Fan Wu <[email protected]>
Diffstat (limited to 'tools/testing/selftests/bpf/prog_tests/prog_array_init.c')
0 files changed, 0 insertions, 0 deletions