Mimi Zohar <zo...@linux.vnet.ibm.com> wrote: > FYI, restrict_link_by_ima_mok() allows keys to be added to the IMA > keyring signed by a key on the .ima_mok keyring, but > restrict_link_by_builtin_and_secondary_trusted() results in "errno: > Required key not available (126)".
Is that fixed by fixing restrict_link_by_builtin_and_secondary_trusted() to check the right keyring? David
