[PATCH v4 0/6] Add CA enforcement keyring restrictions · Eric Snowberg <eric.snowberg@oracle.com> · 2023-02-07
[PATCH v4 5/6] KEYS: CA link restriction · Eric Snowberg <eric.snowberg@oracle.com> · 2023-02-07
Re: [PATCH v4 5/6] KEYS: CA link restriction · Mimi Zohar <zohar@linux.ibm.com> · 2023-02-09
[PATCH v4 1/6] KEYS: Create static version of public_key_verify_signature · Eric Snowberg <eric.snowberg@oracle.com> · 2023-02-07
Re: [PATCH v4 1/6] KEYS: Create static version of public_key_verify_signature · Jarkko Sakkinen <jarkko@kernel.org> · 2023-02-10
Re: [PATCH v4 1/6] KEYS: Create static version of public_key_verify_signature · Eric Snowberg <eric.snowberg@oracle.com> · 2023-02-10
[PATCH v4 2/6] KEYS: Add missing function documentation · Eric Snowberg <eric.snowberg@oracle.com> · 2023-02-07
Re: [PATCH v4 2/6] KEYS: Add missing function documentation · Mimi Zohar <zohar@linux.ibm.com> · 2023-02-08
Re: [PATCH v4 2/6] KEYS: Add missing function documentation · Jarkko Sakkinen <jarkko@kernel.org> · 2023-02-10
[PATCH v4 3/6] KEYS: X.509: Parse Basic Constraints for CA · Eric Snowberg <eric.snowberg@oracle.com> · 2023-02-07
Re: [PATCH v4 3/6] KEYS: X.509: Parse Basic Constraints for CA · Mimi Zohar <zohar@linux.ibm.com> · 2023-02-08
Re: [PATCH v4 3/6] KEYS: X.509: Parse Basic Constraints for CA · Jarkko Sakkinen <jarkko@kernel.org> · 2023-02-10
[PATCH v4 4/6] KEYS: X.509: Parse Key Usage · Eric Snowberg <eric.snowberg@oracle.com> · 2023-02-07
Re: [PATCH v4 4/6] KEYS: X.509: Parse Key Usage · Mimi Zohar <zohar@linux.ibm.com> · 2023-02-08
Re: [PATCH v4 4/6] KEYS: X.509: Parse Key Usage · Jarkko Sakkinen <jarkko@kernel.org> · 2023-02-10
Re: [PATCH v4 4/6] KEYS: X.509: Parse Key Usage · Eric Snowberg <eric.snowberg@oracle.com> · 2023-02-10
[PATCH v4 6/6] integrity: machine keyring CA configuration · Eric Snowberg <eric.snowberg@oracle.com> · 2023-02-07
Re: [PATCH v4 6/6] integrity: machine keyring CA configuration · Mimi Zohar <zohar@linux.ibm.com> · 2023-02-10
Re: [PATCH v4 6/6] integrity: machine keyring CA configuration · Eric Snowberg <eric.snowberg@oracle.com> · 2023-02-10
Re: [PATCH v4 6/6] integrity: machine keyring CA configuration · Jarkko Sakkinen <jarkko@kernel.org> · 2023-02-13
Re: [PATCH v4 6/6] integrity: machine keyring CA configuration · Eric Snowberg <eric.snowberg@oracle.com> · 2023-02-14
Re: [PATCH v4 0/6] Add CA enforcement keyring restrictions · Mimi Zohar <zohar@linux.ibm.com> · 2023-02-08
Re: [PATCH v4 0/6] Add CA enforcement keyring restrictions · Eric Snowberg <eric.snowberg@oracle.com> · 2023-02-08
Re: [PATCH v4 0/6] Add CA enforcement keyring restrictions · Mimi Zohar <zohar@linux.ibm.com> · 2023-02-09

Re: [PATCH v4 5/6] KEYS: CA link restriction

From: Mimi Zohar <zohar@linux.ibm.com>
Date: 2023-02-09 03:00:57
Also in: keyrings, linux-crypto, linux-integrity, lkml

On Mon, 2023-02-06 at 21:59 -0500, Eric Snowberg wrote:

Add a new link restriction.  Restrict the addition of keys in a keyring
based on the key to be added being a CA.

Signed-off-by: Eric Snowberg <eric.snowberg@oracle.com>

Other than expanding the patch description to mention the keyUsage,

Reviewed-by: Mimi Zohar <zohar@linux.ibm.com>

`h`	back out one level
`j`	next message in thread
`k`	previous message in thread
`l`	drill in
`Esc`	close help / fold thread tree
`?`	toggle this help