Re: Re: [PATCH] integrity: don't throw an error immediately when failed to... | linux-security-module

[PATCH] integrity: don't throw an error immediately when failed to add a cert to the .machine keyring · Coiby Xu <hidden> · 2023-12-27
Re: [PATCH] integrity: don't throw an error immediately when failed to add a cert to the .machine keyring · Eric Snowberg <eric.snowberg@oracle.com> · 2024-01-02
Re: Re: [PATCH] integrity: don't throw an error immediately when failed to add a cert to the .machine keyring · Coiby Xu <hidden> · 2024-01-05
Re: [PATCH] integrity: don't throw an error immediately when failed to add a cert to the .machine keyring · Mimi Zohar <zohar@linux.ibm.com> · 2024-01-02
Re: Re: [PATCH] integrity: don't throw an error immediately when failed to add a cert to the .machine keyring · Coiby Xu <hidden> · 2024-01-05
Re: Re: [PATCH] integrity: don't throw an error immediately when failed to add a cert to the .machine keyring · Mimi Zohar <zohar@linux.ibm.com> · 2024-01-05
Re: Re: Re: [PATCH] integrity: don't throw an error immediately when failed to add a cert to the .machine keyring · Coiby Xu <hidden> · 2024-01-09
Re: [PATCH] integrity: don't throw an error immediately when failed to add a cert to the .machine keyring · "Jarkko Sakkinen" <jarkko@kernel.org> · 2024-01-03
Re: Re: [PATCH] integrity: don't throw an error immediately when failed to add a cert to the .machine keyring · Coiby Xu <hidden> · 2024-01-05
Re: [PATCH] integrity: don't throw an error immediately when failed to add a cert to the .machine keyring · "Jarkko Sakkinen" <jarkko@kernel.org> · 2024-01-05
Re: Re: [PATCH] integrity: don't throw an error immediately when failed to add a cert to the .machine keyring · Coiby Xu <hidden> · 2024-01-09
[PATCH v2] integrity: eliminate unnecessary "Problem loading X.509 certificate" msg · Coiby Xu <hidden> · 2024-01-09
Re: [PATCH v2] integrity: eliminate unnecessary "Problem loading X.509 certificate" msg · Coiby Xu <hidden> · 2024-02-16
Re: [PATCH v2] integrity: eliminate unnecessary "Problem loading X.509 certificate" msg · Mimi Zohar <zohar@linux.ibm.com> · 2024-02-16
Re: [PATCH v2] integrity: eliminate unnecessary "Problem loading X.509 certificate" msg · Maxime Ripard <hidden> · 2024-03-06
Re: [PATCH v2] integrity: eliminate unnecessary "Problem loading X.509 certificate" msg · Mimi Zohar <zohar@linux.ibm.com> · 2024-03-06
Re: [PATCH v2] integrity: eliminate unnecessary "Problem loading X.509 certificate" msg · Maxime Ripard <hidden> · 2024-03-06
Re: [PATCH v2] integrity: eliminate unnecessary "Problem loading X.509 certificate" msg · Coiby Xu <hidden> · 2024-03-13

Re: Re: [PATCH] integrity: don't throw an error immediately when failed to add a cert to the .machine keyring

From: Coiby Xu <hidden>
Date: 2024-01-05 13:25:24
Also in: linux-integrity, lkml

On Wed, Jan 03, 2024 at 04:09:29PM +0200, Jarkko Sakkinen wrote:

On Wed Dec 27, 2023 at 6:41 AM EET, Coiby Xu wrote:

quoted

Currently when the kernel fails to add a cert to the .machine keyring,
it will throw an error immediately in the function integrity_add_key.

Since the kernel will try adding to the .platform keyring next or throw
an error (in the caller of integrity_add_key i.e. add_to_machine_keyring),
so there is no need to throw an error immediately in integrity_add_key.

Reported-by: itrymybest80@protonmail.com

Missing "Firstname Lastname".

Thanks for raising this concern! I've asked the reporter if he/she can
share his/her name.

-- 
Best regards,
Coiby

`h`	back out one level
`j`	next message in thread
`k`	previous message in thread
`l`	drill in
`Esc`	close help / fold thread tree
`?`	toggle this help