Messages in this thread | | | From | David Howells <> | Subject | Re: [RFC PATCH 18/20] IMA: Use the system blacklist keyring [ver #2] | Date | Fri, 19 Feb 2016 11:58:41 +0000 |
| |
Mimi Zohar <zohar@linux.vnet.ibm.com> wrote:
> As discussed, "restrict_link_by_system_trusted" is not enough. The > certificate being added should be in a revoked list as well.
What do you mean be a "revoked list"? There currently isn't such a beast in IMA. The patches I've proposed should make the functionality available approximately the same as exists now.
David
| |