[linux-yocto] [PATCH] backport from upstream to linux-yocto-4.1

[Bruce Ashfield]

On 2017-01-11 9:43 PM, Lans Zhang wrote:
> Hi Bruce,
>
> Could you plz merge this commit to the following branches:
> standard/fsl-ls10xx
> standard/intel/4.1.27/leaf-hill
> standard/preempt-rt/next
> standard/xilinx-zynq

It is already there. When I merge something to standard/base, it goes
to all branches that are children.

There is one exception, leaf-hill. I don't update it unless the Intel
maintainers send me the patch.

Cheers,

Bruce

>
> Thanks,
> Jia
>
> On 01/11/2017 11:37 PM, Bruce Ashfield wrote:
>> On 2017-01-10 10:47 PM, Lans Zhang wrote:
>>>
>>> CONFIG_INTEGRITY_SIGNATURE enables the normal IMA keyring "_ima", and
>>> CONFIG_IMA_TRUSTED_KEYRING is used to turn "_ima" into the "trusted"
>>> IMA keyring ".ima".
>>
>> merged.
>>
>> I also added:
>>
>>   commit f4dc37785e9b3373d0cb93125d5579fed2af3a43 upstream
>>
>> to the log (instead of asking for a v2).
>>
>> Bruce
>>
>>
>>
>>>
>>> Without this patch, it is impossible to use the normal IMA keyring if
>>> enabling CONFIG_INTEGRITY_SIGNATURE only.
>>>
>>
>>
>