On Wed, 2016-04-06 at 17:13 +0100, David Howells wrote: > Mimi Zohar <zo...@linux.vnet.ibm.com> wrote: > > > FYI, restrict_link_by_ima_mok() allows keys to be added to the IMA > > keyring signed by a key on the .ima_mok keyring, but > > restrict_link_by_builtin_and_secondary_trusted() results in "errno: > > Required key not available (126)". > > Is that fixed by fixing restrict_link_by_builtin_and_secondary_trusted() to > check the right keyring?
Yes
