CONFIG_INTEGRITY_CA_MACHINE_KEYRING: Enforce Machine Keyring CA Restrictions

General informations

The Linux kernel configuration item CONFIG_INTEGRITY_CA_MACHINE_KEYRING:

• prompt: Enforce Machine Keyring CA Restrictions
• type: bool
• depends on: CONFIG_INTEGRITY_MACHINE_KEYRING
• defined in security/integrity/Kconfig
• found in Linux kernels: 6.4–6.12, 6.13-rc+HEAD

Help text

The .machine keyring can be configured to enforce CA restriction on any key added to it. By default no restrictions are in place and all Machine Owner Keys (MOK) are added to the machine keyring. If enabled only CA keys are added to the machine keyring, all other MOK keys load into the platform keyring.

Hardware

LKDDb

Raw data from LKDDb:

• (none)

Sources

This page is automaticly generated with free (libre, open) software lkddb(see lkddb-sources).

The data is retrived from:

• Linux kernel
• Linux Kernel Driver DataBase (LKDDb)

Automatic links from Google (and ads)

Custom Search

Popular queries: