# Re: \[PATCH v8 04/17\] integrity: Do not allow machine keyring updates following init

- From: Jarkko Sakkinen \<jarkko@kernel.org\>
- Date: 2021-11-27 00:44:18 
- List: linux-security-module
- Page: https://ratatoskr.run/linux-security-module/2021/11/1588268
- Thread: https://ratatoskr.run/keyrings/2021/11/1583494/t.md

```text
On Tue, 2021-11-23 at 23:41 -0500, Eric Snowberg wrote:
> The machine keyring is setup during init.  No additional keys should be
> allowed to be added afterwards.  Leave the permission as read only.
> 
> Signed-off-by: Eric Snowberg <eric.snowberg@oracle.com>
> Reviewed-by: Mimi Zohar <zohar@linux.ibm.com>

For completeness (even if stating the obvious) it would be nice to
say explicitly why no additional keys are not allowed after the init.

/Jarkko
```