platform: cznic: Add keyctl helpers for Turris platform

Browse source

Some Turris devices support signing messages with a per-device unique
asymmetric key that was created on the device at manufacture time.

Add helper module that helps to expose this ability via the keyctl()
syscall.

A device-specific driver can register a signing key by calling
devm_turris_signing_key_create().

Both the `.turris-signing-keys` keyring and the signing key are created
with only the VIEW, READ and SEARCH permissions for userspace - it is
impossible to link / unlink / move them, set their attributes, or unlink
the keyring from userspace.

Signed-off-by: Marek Behún <kabel@kernel.org>
Signed-off-by: Arnd Bergmann <arnd@arndb.de>

...

This commit is contained in:

Marek Behún 2025-02-04 14:14:12 +01:00 • committed by Arnd Bergmann

parent ee7f8ed729

commit 0b28b7080e

No known key found for this signature in database

GPG key ID: 60AB47FFC9095227

5 changed files with 233 additions and 0 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download patch file Download diff file Expand all files Collapse all files

1

MAINTAINERS

View file

5

drivers/platform/cznic/Kconfig

View file

2

drivers/platform/cznic/Makefile

View file

192

drivers/platform/cznic/turris-signing-key.c

View file

33

include/linux/turris-signing-key.h

View file