projects / linux.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: e933bcb) | patch
[PATCH] trust machine keyring (MoK) by default
authorLuca Boccassi <bluca@debian.org>
Thu, 13 Oct 2022 22:22:06 +0000 (00:22 +0200)
committerBen Hutchings <benh@debian.org>
Sun, 4 Aug 2024 20:10:58 +0000 (22:10 +0200)
commit3522658916285b3869405cb27dfff74b6e1bf10f
tree660b1c4f81e7a61f63b5117c0390584654ff6bd2tree | snapshot
parente933bcb98e01ee4fa8a87a2dbfda9c24ca335bd3commit | diff
[PATCH] trust machine keyring (MoK) by default

From 585cbcb982bffc4a8cee2f3d8d099fc64f9a74b9 Mon Sep 17 00:00:00 2001
Forwarded: not-needed

Debian always trusted keys in MoK by default. Upstream made it
conditional on a new EFI variable being set.
To keep backward compatibility skip this check.

Gbp-Pq: Topic features/all/db-mok-keyring
Gbp-Pq: Name trust-machine-keyring-by-default.patch
security/integrity/platform_certs/machine_keyring.c diff | blob | history
Unnamed repository; edit this file 'description' to name the repository.