• Mat Martineau's avatar
    KEYS: Use structure to capture key restriction function and data · 2b6aa412
    Mat Martineau authored
    Replace struct key's restrict_link function pointer with a pointer to
    the new struct key_restriction. The structure contains pointers to the
    restriction function as well as relevant data for evaluating the
    restriction.
    
    The garbage collector checks restrict_link->keytype when key types are
    unregistered. Restrictions involving a removed key type are converted
    to use restrict_link_reject so that restrictions cannot be removed by
    unregistering key types.
    Signed-off-by: default avatarMat Martineau <mathew.j.martineau@linux.intel.com>
    2b6aa412
ima_mok.c 1.36 KB