# Re: \[PATCH v2 5/5\] ima: enable loading of build time generated key on .ima keyring

- From: Stefan Berger \<stefanb@linux.ibm.com\>
- Date: 2021-02-19 15:00:15 
- List: linux-security-module
- Page: https://ratatoskr.run/linux-security-module/2021/02/6273947
- Thread: https://ratatoskr.run/linux-integrity/2021/02/6273426/t.md

```text
On 2/18/21 5:00 PM, Nayna Jain wrote:
> The kernel currently only loads the kernel module signing key onto
> the builtin trusted keyring. To support IMA, load the module signing
> key selectively either onto the builtin or IMA keyring based on MODULE_SIG
> or MODULE_APPRAISE_MODSIG config respectively; and loads the CA kernel
> key onto the builtin trusted keyring.
>
> Signed-off-by: Nayna Jain <nayna@linux.ibm.com>


Reviewed-by: Stefan Berger <stefanb@linux.ibm.com>


```