From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1752872AbcFVX0j (ORCPT ); Wed, 22 Jun 2016 19:26:39 -0400 Received: from mx0a-001b2d01.pphosted.com ([148.163.156.1]:36111 "EHLO mx0a-001b2d01.pphosted.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1750740AbcFVWhm (ORCPT ); Wed, 22 Jun 2016 18:37:42 -0400 X-IBM-Helo: d03dlp02.boulder.ibm.com X-IBM-MailFrom: mkayaalp@linux.vnet.ibm.com From: Mehmet Kayaalp To: David Howells , linux-kernel@vger.kernel.org, linux-security-module@vger.kernel.org, linux-ima-devel@lists.sourceforge.net, keyrings@vger.kernel.org Cc: Mimi Zohar , George Wilson , Stefan Berger , Mehmet Kayaalp Subject: [PATCH 0/3 v2] Certificate insertion support for x86 bzImages Date: Wed, 22 Jun 2016 18:37:30 -0400 X-Mailer: git-send-email 2.7.4 X-TM-AS-GCONF: 00 X-Content-Scanned: Fidelis XPS MAILER x-cbid: 16062222-0024-0000-0000-000013F4721A X-IBM-AV-DETECTION: SAVI=unused REMOTE=unused XFE=unused x-cbparentid: 16062222-0025-0000-0000-0000420EAA86 Message-Id: <1466635053-30512-1-git-send-email-mkayaalp@linux.vnet.ibm.com> X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10432:,, definitions=2016-06-22_12:,, signatures=0 X-Proofpoint-Spam-Details: rule=outbound_notspam policy=outbound score=0 spamscore=0 suspectscore=0 malwarescore=0 phishscore=0 adultscore=0 bulkscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.0.1-1604210000 definitions=main-1606220230 Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org These patches add support for modifying the reserved space for extra certificates in a compressed bzImage in x86. This allows separating the system keyring certificate from the kernel build process. After the kernel image is distributed, the insert-sys-cert script can be used to insert the certificate for x86. Changes: * Rebased 2/3 on top of be1fb0e8eb082 ("kbuild: delete unnecessary "@:"") Mehmet Kayaalp (3): KEYS: Support for inserting a certificate into x86 bzImage KEYS: Insert incompressible bytes to vmlinux to reserve space in bzImage KEYS: Print insert-sys-cert information to stdout instead of stderr arch/x86/boot/compressed/Makefile | 8 ++ scripts/insert-sys-cert.c | 212 ++++++++++++++++++++++++++++++++++++-- 2 files changed, 212 insertions(+), 8 deletions(-) -- 2.7.4