Re: [RFC PATCH 12/12] IMA: Use the the system trusted keyrings instead of .ima_mok [ver #2]

From: Petko Manolov
Date: Tue Mar 08 2016 - 10:48:52 EST


On 16-03-08 14:44:24, David Howells wrote:
> Petko Manolov <petkan@xxxxxxxxxxxx> wrote:
>
> > I would suggest leaving (1) and (3).
>
> Do you mean dropping option (2) and leaving (1) and (3)? Or do you mean
> dropping options (1) and (3)?

Dropping option (2) and leaving (1) and (3).

(2) is subset of (3) and IMHO adds unnecessary complexity.


Petko