CONFIG_INTEGRITY_CA_MACHINE_KEYRING_MAX: Only CA keys without DigitialSignature usage set

General informations

The Linux kernel configuration item CONFIG_INTEGRITY_CA_MACHINE_KEYRING_MAX:

• prompt: Only CA keys without DigitialSignature usage set
• type: bool
• depends on: CONFIG_INTEGRITY_CA_MACHINE_KEYRING
• defined in security/integrity/Kconfig
• found in Linux kernels: 6.4–6.8, 6.9-rc+HEAD

Help text

When selected, only load CA keys are loaded into the machine keyring that contain the CA bit set along with the keyCertSign Usage field. Keys containing the digitialSignature Usage field will not be loaded. The remaining MOK keys are loaded into the .platform keyring.

Hardware

LKDDb

Raw data from LKDDb:

• (none)

Sources

This page is automaticly generated with free (libre, open) software lkddb(see lkddb-sources).

The data is retrived from:

• Linux kernel
• Linux Kernel Driver DataBase (LKDDb)

Automatic links from Google (and ads)

Custom Search

Popular queries: