Matthias Gerstner cb02ff635c 98integrity: support loading x509 into the trusted/builtin .evm keyring This implements logic analogous to the one already implemented in ima-keys-load.sh, only for the .evm/_evm keyrings. If the kernel was built with CONFIG_IMA_TRUSTED_KEYRING then the kernel initially creates and configures .ima and .evm keyrings. These keyrings only accept x509 certificates that have been signed by a local CA which belongs to the kernel builtin trusted keyring. Thus if such a keyring is already present then additional evm keys should be loaded into them. If this is not the case then the _evm keyring needs to be created in userspace and keys will be loaded into it instead. Before this change dracut always created the _evm keyring and loaded keys into it without considering an existing .evm keyring. In case of CONFIG_IMA_TRUSTED_KEYRING being enabled, the _evm keyring will not be used by the kernel, however, and EVM digital signatures will not work as expected.		7 years ago
dracut.conf.d	…
install	dracut-install: strdup() kmod_module_get_name() string	7 years ago
modules.d	98integrity: support loading x509 into the trusted/builtin .evm keyring	7 years ago
skipcpio	…
test	test/ci-matrix.txt: add file specifying which tests to run	7 years ago
.dir-locals.el	…
.gitignore	Ignore more generated files	8 years ago
.kateconfig	…
.kateproject	…
.mailmap	add .mailmap	8 years ago
50-dracut.install	kernel-install: Skip to create initrd if /etc/machine-id is missing or empty	8 years ago
51-dracut-rescue-postinst.sh	…
51-dracut-rescue.install	kernel-install: Skip to create initrd if /etc/machine-id is missing or empty	8 years ago
AUTHORS	update AUTHORS	7 years ago
COPYING	…
HACKING	…
Makefile	fix build with KMOD	8 years ago
NEWS	NEWS: update	8 years ago
PKGBUILD	…
README	…
README.generic	…
README.kernel	…
README.md	README.md: add test 31	7 years ago
README.modules	…
README.testsuite	Drop dependency on bridge-utils	8 years ago
TODO	…
configure	configure, kmod: bump kmod version to >= 23	7 years ago
dracut-bash-completion.sh	fix typo	8 years ago
dracut-catimages.8.asc	…
dracut-catimages.sh	…
dracut-functions.sh	Give --persistent_policy precedence over /dev/mapper names	7 years ago
dracut-init.sh	dracut-emergency: optionally print fs help	7 years ago
dracut-initramfs-restore.sh	add support for Zstandard	8 years ago
dracut-logger.sh	…
dracut.8.asc	add support for Zstandard	8 years ago
dracut.asc	Correct path for UEFI stub	8 years ago
dracut.bootup.7.asc	…
dracut.cmdline.7.asc	dracut.cmdline.7.asc: document rd.ccw and rd.znet	7 years ago
dracut.conf	…
dracut.conf.5.asc	Enable 'early_microcode' by default	7 years ago
dracut.css	…
dracut.logrotate	…
dracut.modules.7.asc	…
dracut.png	…
dracut.sh	Enable 'early_microcode' by default	7 years ago
dracut.spec	configure, kmod: bump kmod version to >= 23	7 years ago
dracut.svg	…
dracut.usage.asc	…
git2spec.pl	git2spec.pl: handle empty merge commits	7 years ago
lsinitrd-bash-completion.sh	…
lsinitrd.1.asc	…
lsinitrd.sh	lsinitrd.sh: quote filename in extract_files()	7 years ago
mkinitrd-dracut.sh	…
mkinitrd-suse.8.asc	…
mkinitrd-suse.sh	mkinitrd-suse.sh: Implement functionality of -A option	7 years ago
mkinitrd.8.asc	…
profile.py	…

README.md

dracut - master branch

dracut is an initramfs infrastructure.

CentOS CI

Test 01:
Test 02:
Test 03:
Test 04:
Test 10:
Test 11:
Test 12:
Test 13:
Test 14:
Test 15:
Test 16:
Test 17:
Test 20:
Test 30:
Test 31:
Test 40:
Test 50:
Test 70: