Mehmet Kayaalp c4c3610595 KEYS: Reserve an extra certificate symbol for inserting without recompiling ...

Place a system_extra_cert buffer of configurable size, right after the
system_certificate_list, so that inserted keys can be readily processed by
the existing mechanism. Added script takes a key file and a kernel image
and inserts its contents to the reserved area. The
system_certificate_list_size is also adjusted accordingly.

Call the script as:

    scripts/insert-sys-cert -b <vmlinux> -c <certfile>

If vmlinux has no symbol table, supply System.map file with -s flag.
Subsequent runs replace the previously inserted key, instead of appending
the new one.

Signed-off-by: Mehmet Kayaalp <mkayaalp@linux.vnet.ibm.com>
Signed-off-by: David Howells <dhowells@redhat.com>
Acked-by: Mimi Zohar <zohar@linux.vnet.ibm.com>

2016-02-26 15:30:20 +00:00

..

.gitignore

certs: add .gitignore to stop git nagging about x509_certificate_list

2015-10-21 15:18:35 +01:00

Kconfig

KEYS: Reserve an extra certificate symbol for inserting without recompiling

2016-02-26 15:30:20 +00:00

Makefile

modsign: hide openssl output in silent builds

2016-02-26 11:16:38 +00:00

system_certificates.S

KEYS: Reserve an extra certificate symbol for inserting without recompiling

2016-02-26 15:30:20 +00:00

system_keyring.c

KEYS: Add an alloc flag to convey the builtinness of a key

2016-02-09 16:40:46 +00:00