[PATCH] integrity: don't throw an error immediately when failed to add a cert to the .machine keyring

2023-12-26 Thread Coiby Xu
Currently when the kernel fails to add a cert to the .machine keyring, it will throw an error immediately in the function integrity_add_key. Since the kernel will try adding to the .platform keyring next or throw an error (in the caller of integrity_add_key i.e. add_to_machine_keyring), so there

Re: [RFC][PATCH] ima: add crypto agility support for template-hash algorithm

2023-12-26 Thread Ken Goldman
On 12/25/2023 8:00 AM, Guozihua (Scott) wrote: After thinking about this some more, I realized that we didn't discuss carrying the measurement list across kexec. How will the kexec'ed kernel be able to differentiate between the original and new measurement list? Neither the Kconfig nor

TPM interrupt patch on LTS

2023-12-26 Thread João Paulo Silva Gonçalves
Hello, We are integrating a SPI TPM from Infineon with 6.1/5.15 LTS kernels for an embedded platform and it is giving an error message that interrupts are not working. There is a correction from [1] already on upstream but the patch that makes interrupts work, commit e644b2f498d2 ("tpm,