Messages in this thread | | | Date | Wed, 11 Jun 2014 04:23:55 +0100 | From | Matthew Garrett <> | Subject | Re: [PATCH 0/4] KEYS: validate key trust with owner and builtin keys only |
| |
On Tue, Jun 10, 2014 at 11:08:15PM -0400, Mimi Zohar wrote: > On Wed, 2014-06-11 at 03:22 +0100, Matthew Garrett wrote: > > Providing a userspace mechanism for selectively dropping keys from the > > kernel seems like a good thing? > > No, patch "KEYS: verify a certificate is signed by a 'trusted' key" adds > signed public keys.
Yes. Wouldn't having a mechanism to allow userspace to drop keys that have otherwise been imported be a generally useful solution to the issue you have with that?
-- Matthew Garrett | mjg59@srcf.ucam.org
| |