Re: [RFC PATCH 00/15] KEYS: Restrict additions to 'trusted' keyrings

From: David Howells
Date: Mon Jan 11 2016 - 19:38:31 EST

Mimi Zohar <zohar@xxxxxxxxxxxxxxxxxx> wrote:

> Back in November, Mehmet Kayaalp posted a patch for safely adding
> additional keys to the system keyring post build and a tool for
> re-signing the kernel.

That's irrelevant to this particular discussion. And, yes, I should deal with
his patch.