OSDN Git Service

integrity: check whether imputed trust is enabled
authorNayna Jain <nayna@linux.ibm.com>
Tue, 15 Aug 2023 11:27:20 +0000 (07:27 -0400)
committerJarkko Sakkinen <jarkko@kernel.org>
Thu, 17 Aug 2023 20:12:35 +0000 (20:12 +0000)
commit4cb1ed94f18047d0863f976bc95aa7c0584cc51c
tree6cd37cc5b70f084183b3f015ecc4555e4720744e
parent7b9de406582d12b72cce72c056b5678e8c0627eb
integrity: check whether imputed trust is enabled

trust_moklist() is specific to UEFI enabled systems. Other platforms
rely only on the Kconfig.

Define a generic wrapper named imputed_trust_enabled().

Signed-off-by: Nayna Jain <nayna@linux.ibm.com>
Reviewed-by: Mimi Zohar <zohar@linux.ibm.com>
Tested-by: Nageswara R Sastry <rnsastry@linux.ibm.com>
Signed-off-by: Jarkko Sakkinen <jarkko@kernel.org>
security/integrity/digsig.c
security/integrity/integrity.h
security/integrity/platform_certs/keyring_handler.c
security/integrity/platform_certs/machine_keyring.c