Messages in this thread | | | Subject | Re: [PATCH v11 0/4] integrity: support including firmware ".platform" keys at build time | From | Jarkko Sakkinen <> | Date | Fri, 11 Mar 2022 18:42:33 +0200 |
| |
On Fri, 2022-03-11 at 10:11 +0530, Nageswara Sastry wrote: > > > On 11/03/22 3:14 am, Nayna Jain wrote: > > Some firmware support secure boot by embedding static keys to verify the > > Linux kernel during boot. However, these firmware do not expose an > > interface for the kernel to load firmware keys onto the ".platform" > > keyring, preventing the kernel from verifying the kexec kernel image > > signature. > > > > This patchset exports load_certificate_list() and defines a new function > > load_builtin_platform_cert() to load compiled in certificates onto the > > ".platform" keyring. > > > > Changelog: > > v11: > > * Added a new patch to conditionally build extract-cert if > > PLATFORM_KEYRING is enabled. > > > > Tested the following four patches with and with out setting > CONFIG_INTEGRITY_PLATFORM_KEYS > > Tested-by: Nageswara R Sastry <rnsastry@linux.ibm.com>
OK, I added it:
git://git.kernel.org/pub/scm/linux/kernel/git/jarkko/linux-tpmdd.git
BR, Jarkko
| |