linux/security/integrity/digsig.c, branch v3.8.2Linux kernel source treehttps://git.amat.us/linux/atom/security/integrity/digsig.c?h=v3.8.22011-11-09T14:51:09Zintegrity: digital signature verification using multiple keyrings2011-11-09T14:51:09ZDmitry Kasatkindmitry.kasatkin@intel.com2011-10-05T08:54:46Zurn:sha1:8607c501478432b23654739c7321bc7456053cb6
Define separate keyrings for each of the different use cases - evm, ima,
and modules. Using different keyrings improves search performance, and also
allows "locking" specific keyring to prevent adding new keys.
This is useful for evm and module keyrings, when keys are usually only
added from initramfs.
Signed-off-by: Dmitry Kasatkin <dmitry.kasatkin@intel.com>