Re: [PATCH 1/2] kexec, KEYS: make the code in bzImage64_verify_sig public

2021-10-07 Thread Coiby Xu
Hi Dave, On Thu, Sep 30, 2021 at 08:49:02PM +0800, Dave Young wrote: Hi Coiby, On 09/27/21 at 08:50am, Coiby Xu wrote: From: Coiby Xu The code in bzImage64_verify_sig could make use of system keyrings including .buitin_trusted_keys, .secondary_trusted_keys and .platform keyring to verify

Re: [PATCH 1/2] kexec, KEYS: make the code in bzImage64_verify_sig public

2021-09-30 Thread Dave Young
On 09/30/21 at 08:49pm, Dave Young wrote: > Hi Coiby, > On 09/27/21 at 08:50am, Coiby Xu wrote: > > From: Coiby Xu > > > > The code in bzImage64_verify_sig could make use of system keyrings including > > .buitin_trusted_keys, .secondary_trusted_keys and .platform keyring to > > verify > >

Re: [PATCH 1/2] kexec, KEYS: make the code in bzImage64_verify_sig public

2021-09-30 Thread Dave Young
Hi Coiby, On 09/27/21 at 08:50am, Coiby Xu wrote: > From: Coiby Xu > > The code in bzImage64_verify_sig could make use of system keyrings including > .buitin_trusted_keys, .secondary_trusted_keys and .platform keyring to verify > signed kernel image as PE file. Move it to a public function. > >

[PATCH 1/2] kexec, KEYS: make the code in bzImage64_verify_sig public

2021-09-26 Thread Coiby Xu
From: Coiby Xu The code in bzImage64_verify_sig could make use of system keyrings including .buitin_trusted_keys, .secondary_trusted_keys and .platform keyring to verify signed kernel image as PE file. Move it to a public function. Signed-off-by: Coiby Xu --- arch/x86/kernel/kexec-bzimage64.c