Re: [PATCH] IMA: Use the system trusted keyrings instead of .ima_mok (update)
From: David Howells
Date: Wed Apr 06 2016 - 12:24:57 EST
Looking in digsig.c, I see:
#ifdef CONFIG_INTEGRITY_TRUSTED_KEYRING
static bool init_keyring __initdata = true;
#else
static bool init_keyring __initdata;
#endif
Since this doesn't ever appear to be altered, should integrity_init_keyring()
just be made conditionally compiled?
David