Re: [RFC][PATCH 08/12] KEYS: PGP-based public key signature verification

[David Howells]

Roberto Sassu <roberto.sassu@xxxxxxxxxx> wrote:

> - switch from session to user keyring (Roberto Sassu)
> - search user keyring only if no keyring was provided, so that the
>   trustworthiness of the signature depends on the type of keyring
>   containing the key used for signature verification (Roberto Sassu)

Er.  No.  You should search the session keyring.  This may contain a link to
the user keyring (pam_keyinit emplaces one).

You need to consider what it is that the patch trying to achieve.

David