2023-05-17 01:20:45

by Mimi Zohar

[permalink] [raw]
Subject: Re: [PATCH 1/3] KEYS: DigitalSignature link restriction

On Mon, 2023-05-08 at 18:07 -0400, Eric Snowberg wrote:
> Add a new link restriction. Restrict the addition of keys in a keyring
> based on the key having digitalSignature usage set. Additionally, verify
> the new certificate against the ones in the system keyrings. Add two
> additional functions to use the new restriction within either the builtin
> or secondary keyrings.
>
> Signed-off-by: Eric Snowberg <[email protected]>

Thanks, Eric.

Reviewed-by: Mimi Zohar <[email protected]>