Re: [PATCH] X.509: Partially revert patch to add validation against IMA MOK keyring

[David Howells]

Mimi Zohar <zohar@xxxxxxxxxxxxxxxxxx> wrote:

> > > The name "restrict_link_by_ima_mok()" doesn't reflect that it is either
> > > the system keyring or the IMA MOK keyring.
> > 
> > How about restrict_link_by_ima_trusted()?
> 
> Good.  restrict_link_by_ima_trusted would only check the IMA MOK keyring
> if it was configured.

And the system keyring?

David