Re: [PATCH] X.509: Partially revert patch to add validation against IMA MOK keyring

[David Howells]

Mimi Zohar <zohar@xxxxxxxxxxxxxxxxxx> wrote:

> I beg to differ.  The IMA model is not broken with the current patches
> being upstreamed.  The basic concepts developed will continue to be
> used, perhaps not directly by IMA.

I still object to the change to x509_key_preparse() and still want it
reverting or removing.  It affects module signing too.

David