Re: [PATCH v4 6/6] integrity: PowerVM support for loading third party code signing keys
From: Mimi Zohar <zohar@linux.ibm.com>
Date: 2023-08-15 20:32:03
Also in:
linux-integrity, linux-security-module
On Tue, 2023-08-15 at 07:27 -0400, Nayna Jain wrote:
On secure boot enabled PowerVM LPAR, third party code signing keys are needed during early boot to verify signed third party modules. These third party keys are stored in moduledb object in the Platform KeyStore (PKS). Load third party code signing keys onto .secondary_trusted_keys keyring. Signed-off-by: Nayna Jain <nayna@linux.ibm.com>
Reviewed-and-tested-by: Mimi Zohar [off-list ref]