Re: [PATCH] IMA: Use the system trusted keyrings instead of .ima_mok (update)

[David Howells]

Looking in digsig.c, I see:

        #ifdef CONFIG_INTEGRITY_TRUSTED_KEYRING
        static bool init_keyring __initdata = true;
        #else
        static bool init_keyring __initdata;
        #endif

Since this doesn't ever appear to be altered, should integrity_init_keyring()
just be made conditionally compiled?

David