JIRA: https://issues.redhat.com/browse/RHEL-11462
Upstream Status: git://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git
Conflicts: This commit is a bit different from the upstream commit because it
also fixes a small difference between a previous commit backported from
from the subsystem maintainer Jarkko Sakkinen's tree and the one
landing in Linus's tree. For details, please refer to
previous commit 5118691156 ("KEYS: DigitalSignature link restriction")
and commit 4cfb90805445.
commit 44e69ea53892f18e8753943a4376de20b076c3fe
Author: Nayna Jain <nayna@linux.ibm.com>
Date: Tue Aug 15 07:27:22 2023 -0400
integrity: PowerVM support for loading third party code signing keys
On secure boot enabled PowerVM LPAR, third party code signing keys are
needed during early boot to verify signed third party modules. These
third party keys are stored in moduledb object in the Platform
KeyStore (PKS).
Load third party code signing keys onto .secondary_trusted_keys keyring.
Signed-off-by: Nayna Jain <nayna@linux.ibm.com>
Reviewed-and-tested-by: Mimi Zohar <zohar@linux.ibm.com>
Reviewed-by: Jarkko Sakkinen <jarkko@kernel.org>
Tested-by: Nageswara R Sastry <rnsastry@linux.ibm.com>
Signed-off-by: Jarkko Sakkinen <jarkko@kernel.org>
Signed-off-by: Coiby Xu <coxu@redhat.com>
dba178aa01