Petko Manolov 41c89b64d7 IMA: create machine owner and blacklist keyrings ... This option creates IMA MOK and blacklist keyrings. IMA MOK is an intermediate keyring that sits between .system and .ima keyrings, effectively forming a simple CA hierarchy. To successfully import a key into .ima_mok it must be signed by a key which CA is in .system keyring. On turn any key that needs to go in .ima keyring must be signed by CA in either .system or .ima_mok keyrings. IMA MOK is empty at kernel boot. IMA blacklist keyring contains all revoked IMA keys. It is consulted before any other keyring. If the search is successful the requested operation is rejected and error is returned to the caller. Signed-off-by: Petko Manolov <petkan@mip-labs.com> Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>		2015-12-15 10:01:43 -05:00
..
asymmetric-parser.h	KEYS: Asymmetric key pluggable data parsers	2012-10-08 13:50:13 +10:30
asymmetric-subtype.h	KEYS: Merge the type-specific data with the payload data	2015-10-21 15:18:36 +01:00
asymmetric-type.h	KEYS: Merge the type-specific data with the payload data	2015-10-21 15:18:36 +01:00
big_key-type.h	KEYS: big_key: Use key preparsing	2014-07-22 21:46:47 +01:00
ceph-type.h
dns_resolver-type.h
encrypted-type.h	encrypted-keys: add key format support	2011-06-27 09:10:45 -04:00
keyring-type.h	KEYS: Expand the capacity of a keyring	2013-09-24 10:35:18 +01:00
rxrpc-type.h
system_keyring.h	IMA: create machine owner and blacklist keyrings	2015-12-15 10:01:43 -05:00
trusted-type.h	tpm: seal/unseal for TPM 2.0	2015-10-19 01:01:21 +02:00
user-type.h	KEYS: Merge the type-specific data with the payload data	2015-10-21 15:18:36 +01:00