[PATCH RFC 00/12] Enroll kernel keys thru MOK · Eric Snowberg <eric.snowberg@oracle.com> · 2021-07-07
[PATCH RFC 02/12] KEYS: Allow unrestricted keys to be moved to the secondary keyring · Eric Snowberg <eric.snowberg@oracle.com> · 2021-07-07
[PATCH RFC 05/12] integrity: Introduce mok keyring · Eric Snowberg <eric.snowberg@oracle.com> · 2021-07-07
Re: [PATCH RFC 05/12] integrity: Introduce mok keyring · Linus Torvalds <torvalds@linux-foundation.org> · 2021-07-07
Re: [PATCH RFC 05/12] integrity: Introduce mok keyring · Jarkko Sakkinen <jarkko@kernel.org> · 2021-07-07
Re: [PATCH RFC 05/12] integrity: Introduce mok keyring · Eric Snowberg <eric.snowberg@oracle.com> · 2021-07-07
[PATCH RFC 09/12] integrity: accessor function to get trust_moklist · Eric Snowberg <eric.snowberg@oracle.com> · 2021-07-07
[PATCH RFC 04/12] integrity: add integrity_destroy_keyring · Eric Snowberg <eric.snowberg@oracle.com> · 2021-07-07
[PATCH RFC 03/12] KEYS: CA link restriction · Eric Snowberg <eric.snowberg@oracle.com> · 2021-07-07
[PATCH RFC 01/12] KEYS: Add KEY_ALLOC_BYPASS_RESTRICTION option to key_move · Eric Snowberg <eric.snowberg@oracle.com> · 2021-07-07
[PATCH RFC 12/12] integrity: Suppress error message for keys added to the mok keyring · Eric Snowberg <eric.snowberg@oracle.com> · 2021-07-07
[PATCH RFC 08/12] integrity: restrict INTEGRITY_KEYRING_MOK to restrict_link_by_secondary_trusted_or_ca · Eric Snowberg <eric.snowberg@oracle.com> · 2021-07-07
[PATCH RFC 11/12] integrity: move keys from the mok keyring into the secondary keyring · Eric Snowberg <eric.snowberg@oracle.com> · 2021-07-07
[PATCH RFC 06/12] integrity: Trust mok keys if MokListTrustedRT found · Eric Snowberg <eric.snowberg@oracle.com> · 2021-07-07
[PATCH RFC 07/12] integrity: add add_to_mok_keyring · Eric Snowberg <eric.snowberg@oracle.com> · 2021-07-07
[PATCH RFC 10/12] integrity: add new keyring handler · Eric Snowberg <eric.snowberg@oracle.com> · 2021-07-07
Re: [PATCH RFC 00/12] Enroll kernel keys thru MOK · Christoph Hellwig <hch@infradead.org> · 2021-07-07
Re: [PATCH RFC 00/12] Enroll kernel keys thru MOK · Eric Snowberg <eric.snowberg@oracle.com> · 2021-07-07
Re: [PATCH RFC 00/12] Enroll kernel keys thru MOK · Christoph Hellwig <hch@infradead.org> · 2021-07-07
Re: [PATCH RFC 00/12] Enroll kernel keys thru MOK · Eric Snowberg <eric.snowberg@oracle.com> · 2021-07-07
Re: [PATCH RFC 00/12] Enroll kernel keys thru MOK · Mimi Zohar <zohar@linux.ibm.com> · 2021-07-07
Re: [PATCH RFC 00/12] Enroll kernel keys thru MOK · Eric Snowberg <eric.snowberg@oracle.com> · 2021-07-07
Re: [PATCH RFC 00/12] Enroll kernel keys thru MOK · Mimi Zohar <zohar@linux.ibm.com> · 2021-07-07
Re: [PATCH RFC 00/12] Enroll kernel keys thru MOK · Eric Snowberg <eric.snowberg@oracle.com> · 2021-07-07
Re: [PATCH RFC 00/12] Enroll kernel keys thru MOK · Mimi Zohar <zohar@linux.ibm.com> · 2021-07-08
Re: [PATCH RFC 00/12] Enroll kernel keys thru MOK · Eric Snowberg <eric.snowberg@oracle.com> · 2021-07-08
Re: [PATCH RFC 00/12] Enroll kernel keys thru MOK · Mimi Zohar <zohar@linux.ibm.com> · 2021-07-08
Re: [PATCH RFC 00/12] Enroll kernel keys thru MOK · Eric Snowberg <eric.snowberg@oracle.com> · 2021-07-08
Re: [PATCH RFC 00/12] Enroll kernel keys thru MOK · Mimi Zohar <zohar@linux.ibm.com> · 2021-07-09
Re: [PATCH RFC 00/12] Enroll kernel keys thru MOK · Nayna <hidden> · 2021-07-09

Re: [PATCH RFC 00/12] Enroll kernel keys thru MOK

From: Christoph Hellwig <hch@infradead.org>
Date: 2021-07-07 06:46:36
Also in: keyrings, linux-crypto, linux-integrity, lkml

On Tue, Jul 06, 2021 at 10:43:51PM -0400, Eric Snowberg wrote:

This is a follow up to the "Add additional MOK vars" [1] series I 
previously sent.  This series incorporates the feedback given 
both publicly on the mailing list and privately from Mimi. This 
series just focuses on getting end-user keys into the kernel trust 
boundary.

WTF is MOK?

`h`	back out one level
`j`	next message in thread
`k`	previous message in thread
`l`	drill in
`Esc`	close help / fold thread tree
`?`	toggle this help