xiaomi-sm8450/android_kernel_xiaomi_sm8450
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

KEYS: Add documentation for asymmetric keyring restrictions

Browse Source 
Provide more specific examples of keyring restrictions as applied to
X.509 signature chain verification.

Signed-off-by: Mat Martineau <mathew.j.martineau@linux.intel.com>
Signed-off-by: David Howells <dhowells@redhat.com>
Signed-off-by: James Morris <james.l.morris@oracle.com>
This commit is contained in:
Mat Martineau
2017-07-13 13:17:03 +01:00
committed by James Morris
parent 4f9dabfaf8
commit 7228b66aaf
2 changed files with 63 additions and 8 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
Documentation/security/keys/core.rst
View File

@@ -894,6 +894,12 @@ The keyctl syscall functions are:
To apply a keyring restriction the process must have Set Attribute
permission and the keyring must not be previously restricted.
One application of restricted keyrings is to verify X.509 certificate
chains or individual certificate signatures using the asymmetric key type.
See Documentation/crypto/asymmetric-keys.txt for specific restrictions
applicable to the asymmetric key type.
Kernel Services
===============