Re: [PATCH] IMA: Use the system trusted keyrings instead of .ima_mok (update)

[David Howells]

Mimi Zohar <zohar@xxxxxxxxxxxxxxxxxx> wrote:

> I'm not sure what you're asking.  If you're asking if the whole file can
> be include based on whether this option is enabled, then no.

No - but integrity_init_keyring() just returns if init_keyring is false - but
this is a variable and is assigned storage, despite the fact that its value is
only set at compile time as far as I can see.

David