Re: [PATCH] IMA: Use the system trusted keyrings instead of .ima_mok (update)

From: David Howells
Date: Wed Apr 06 2016 - 12:24:57 EST


Looking in digsig.c, I see:

#ifdef CONFIG_INTEGRITY_TRUSTED_KEYRING
static bool init_keyring __initdata = true;
#else
static bool init_keyring __initdata;
#endif

Since this doesn't ever appear to be altered, should integrity_init_keyring()
just be made conditionally compiled?

David