Re: [PATCH] integrity: don't throw an error immediately when failed to add a... | linux-security-module

[PATCH] integrity: don't throw an error immediately when failed to add a cert to the .machine keyring · Coiby Xu <hidden> · 2023-12-27
Re: [PATCH] integrity: don't throw an error immediately when failed to add a cert to the .machine keyring · Eric Snowberg <eric.snowberg@oracle.com> · 2024-01-02
Re: Re: [PATCH] integrity: don't throw an error immediately when failed to add a cert to the .machine keyring · Coiby Xu <hidden> · 2024-01-05
Re: [PATCH] integrity: don't throw an error immediately when failed to add a cert to the .machine keyring · Mimi Zohar <zohar@linux.ibm.com> · 2024-01-02
Re: Re: [PATCH] integrity: don't throw an error immediately when failed to add a cert to the .machine keyring · Coiby Xu <hidden> · 2024-01-05
Re: Re: [PATCH] integrity: don't throw an error immediately when failed to add a cert to the .machine keyring · Mimi Zohar <zohar@linux.ibm.com> · 2024-01-05
Re: Re: Re: [PATCH] integrity: don't throw an error immediately when failed to add a cert to the .machine keyring · Coiby Xu <hidden> · 2024-01-09
Re: [PATCH] integrity: don't throw an error immediately when failed to add a cert to the .machine keyring · "Jarkko Sakkinen" <jarkko@kernel.org> · 2024-01-03
Re: Re: [PATCH] integrity: don't throw an error immediately when failed to add a cert to the .machine keyring · Coiby Xu <hidden> · 2024-01-05
Re: [PATCH] integrity: don't throw an error immediately when failed to add a cert to the .machine keyring · "Jarkko Sakkinen" <jarkko@kernel.org> · 2024-01-05
Re: Re: [PATCH] integrity: don't throw an error immediately when failed to add a cert to the .machine keyring · Coiby Xu <hidden> · 2024-01-09
[PATCH v2] integrity: eliminate unnecessary "Problem loading X.509 certificate" msg · Coiby Xu <hidden> · 2024-01-09
Re: [PATCH v2] integrity: eliminate unnecessary "Problem loading X.509 certificate" msg · Coiby Xu <hidden> · 2024-02-16
Re: [PATCH v2] integrity: eliminate unnecessary "Problem loading X.509 certificate" msg · Mimi Zohar <zohar@linux.ibm.com> · 2024-02-16
Re: [PATCH v2] integrity: eliminate unnecessary "Problem loading X.509 certificate" msg · Maxime Ripard <hidden> · 2024-03-06
Re: [PATCH v2] integrity: eliminate unnecessary "Problem loading X.509 certificate" msg · Mimi Zohar <zohar@linux.ibm.com> · 2024-03-06
Re: [PATCH v2] integrity: eliminate unnecessary "Problem loading X.509 certificate" msg · Maxime Ripard <hidden> · 2024-03-06
Re: [PATCH v2] integrity: eliminate unnecessary "Problem loading X.509 certificate" msg · Coiby Xu <hidden> · 2024-03-13

Re: [PATCH] integrity: don't throw an error immediately when failed to add a cert to the .machine keyring

From: Eric Snowberg <eric.snowberg@oracle.com>
Date: 2024-01-02 17:34:21
Also in: linux-integrity, lkml

On Dec 26, 2023, at 9:41 PM, Coiby Xu [off-list ref] wrote:

Currently when the kernel fails to add a cert to the .machine keyring,
it will throw an error immediately in the function integrity_add_key.

Since the kernel will try adding to the .platform keyring next or throw
an error (in the caller of integrity_add_key i.e. add_to_machine_keyring),
so there is no need to throw an error immediately in integrity_add_key.

Reported-by: itrymybest80@protonmail.com
Closes: https://bugzilla.redhat.com/show_bug.cgi?id=2239331
Signed-off-by: Coiby Xu <redacted>

Reviewed-by: Eric Snowberg <eric.snowberg@oracle.com>

`h`	back out one level
`j`	next message in thread
`k`	previous message in thread
`l`	drill in
`Esc`	close help / fold thread tree
`?`	toggle this help