Messages in this thread Patch in this message | | | From | Roberto Sassu <> | Subject | [PATCH 1/2] trusted-key: allow overwriting the migratable flag | Date | Wed, 2 Nov 2011 13:41:18 +0100 |
| |
The migratable should be modifiable during the key update() method. This allows for example to update a migratable trusted key, wrapped by a TPM key, to a a non-migratable one sealed under the SRK with a PCR set.
Signed-off-by: Roberto Sassu <roberto.sassu@polito.it> --- security/keys/trusted.c | 1 - 1 files changed, 0 insertions(+), 1 deletions(-)
diff --git a/security/keys/trusted.c b/security/keys/trusted.c index 0c33e2e..8777015 100644 --- a/security/keys/trusted.c +++ b/security/keys/trusted.c @@ -1036,7 +1036,6 @@ static int trusted_update(struct key *key, const void *data, size_t datalen) goto out; } /* copy old key values, and reseal with new pcrs */ - new_p->migratable = p->migratable; new_p->key_len = p->key_len; memcpy(new_p->key, p->key, p->key_len); dump_payload(p); -- 1.7.6.4 [unhandled content-type:application/x-pkcs7-signature] | |