diff options
| author |   Coiby Xu <coxu@redhat.com> | 2022-07-14 21:40:25 +0800 |
|---|---|---|
| committer |   Mimi Zohar <zohar@linux.ibm.com> | 2022-07-15 12:21:16 -0400 |
| commit | c903dae8941deb55043ee46ded29e84e97cd84bb (patch) | |
| tree | e36423f7902aa6e217396efaa0b4e67d5f495052 /scripts/generate_rust_analyzer.py | |
| parent | kexec: clean up arch_kexec_kernel_verify_sig (diff) | |
| download | wireguard-linux-c903dae8941deb55043ee46ded29e84e97cd84bb.tar.xz wireguard-linux-c903dae8941deb55043ee46ded29e84e97cd84bb.zip | |
kexec, KEYS: make the code in bzImage64_verify_sig generic
commit 278311e417be ("kexec, KEYS: Make use of platform keyring for
signature verify") adds platform keyring support on x86 kexec but not
arm64.
The code in bzImage64_verify_sig uses the keys on the
.builtin_trusted_keys, .machine, if configured and enabled,
.secondary_trusted_keys, also if configured, and .platform keyrings
to verify the signed kernel image as PE file.
Cc: kexec@lists.infradead.org
Cc: keyrings@vger.kernel.org
Cc: linux-security-module@vger.kernel.org
Reviewed-by: Michal Suchanek <msuchanek@suse.de>
Signed-off-by: Coiby Xu <coxu@redhat.com>
Signed-off-by: Mimi Zohar <zohar@linux.ibm.com>
Diffstat (limited to 'scripts/generate_rust_analyzer.py')
0 files changed, 0 insertions, 0 deletions