Re: [PATCH 2/6] integrity: ignore keys failing CA restrictions on non-UEFI platform
From: Mimi Zohar <zohar@linux.ibm.com>
Date: 2023-08-02 22:59:26
Also in:
linux-integrity, linux-security-module, lkml
On Fri, 2023-07-14 at 11:34 -0400, Nayna Jain wrote:
On non-UEFI platforms, handle restrict_link_by_ca failures differently. Certificates which do not satisfy CA restrictions on non-UEFI platforms are ignored. Signed-off-by: Nayna Jain <nayna@linux.ibm.com>
Reviewed-and-tested-by: Mimi Zohar [off-list ref]