On Tue, Mar 07, 2023 at 08:25:23PM +0100, Michal Suchánek wrote:
On Tue, Mar 07, 2023 at 07:17:24PM -0000, Joe Salmeri wrote:
Hi Michal,
If you mean to do this
CONFIG_IMA_KEYRINGS_PERMIT_SIGNED_BY_BUILTIN_OR_SECONDARY='y'
The kernel would have to be rebuilt with the option.
And is is incompatible with the machine keyring.
Hopefully it is not needed. The option name and description do not match all that well.
Wouldn't it worth a try to rebuild with this option set? At least on Leap 15.4 it *is* set and there we don't see that issue ... Thanks, Stefan Public Key available ------------------------------------------------------ Stefan Dirsch (Res. & Dev.) SUSE Software Solutions Germany GmbH Tel: 0911-740 53 0 Frankenstraße 146 FAX: 0911-740 53 479 D-90461 Nürnberg http://www.suse.de Germany ---------------------------------------------------------------- Geschäftsführer: Ivo Totev, Andrew Myers, Andrew McDonald, Boudien Moerman (HRB 36809, AG Nürnberg) ----------------------------------------------------------------