summaryrefslogtreecommitdiff
path: root/include/linux/turris-signing-key.h
AgeCommit message (Collapse)Author
2025-04-04firmware: turris-mox-rwtm: fix building without CONFIG_KEYSArnd Bergmann
"struct key" is defined conditionally, so the code referencing it must be made conditional as well: In file included from drivers/firmware/turris-mox-rwtm.c:29: include/linux/turris-signing-key.h: In function 'turris_signing_key_get_dev': include/linux/turris-signing-key.h:26:19: error: invalid use of undefined type 'const struct key' 26 | return key->payload.data[1]; | ^~ Signed-off-by: Arnd Bergmann <arnd@arndb.de>
2025-03-20platform: cznic: Add keyctl helpers for Turris platformMarek BehĂșn
Some Turris devices support signing messages with a per-device unique asymmetric key that was created on the device at manufacture time. Add helper module that helps to expose this ability via the keyctl() syscall. A device-specific driver can register a signing key by calling devm_turris_signing_key_create(). Both the `.turris-signing-keys` keyring and the signing key are created with only the VIEW, READ and SEARCH permissions for userspace - it is impossible to link / unlink / move them, set their attributes, or unlink the keyring from userspace. Signed-off-by: Marek BehĂșn <kabel@kernel.org> Signed-off-by: Arnd Bergmann <arnd@arndb.de>