Re: [PATCH v9 0/4] powerpc: expose secure variables to the kernel and userspace

From
Michael Ellerman <mpe@ellerman.id.au>
Date
2019-11-12 01:21:06
Also in
linux-efi, linux-integrity, lkml
Reply to
Lakshmi Ramasubramanian, 2019-11-11
Lakshmi Ramasubramanian [off-list ref] writes:
On 11/10/19 7:10 PM, Nayna Jain wrote:

Hi Nayna,
quoted
In order to verify the OS kernel on PowerNV systems, secure boot requires
X.509 certificates trusted by the platform. These are stored in secure
variables controlled by OPAL, called OPAL secure variables. In order to
enable users to manage the keys, the secure variables need to be exposed
to userspace.
Are you planning to split the patches in this patch set into smaller 
chunks so that it is easier to code review and also perhaps make it 
easier when merging the changes?
I don't think splitting them would add any value. They're already split
into the firmware specific bits (patch 1), and the sysfs parts (patch
2), which is sufficient for me.

cheers
Thread (8 messages) 8 messages, 4 authors, last reply 2019-11-14
Keyboard shortcuts
hback out one level
jnext message in thread / next series-diff position
kprevious message in thread / previous series-diff position
ldrill in
Escclose help / fold thread tree
?toggle this help