commit 8e323a02e866014091180443ccb186fee1e3d30d
author Mat Martineau <mathew.j.martineau@linux.intel.com> Tue Oct 04 16:42:45 2016 -0700
committer Mat Martineau <mathew.j.martineau@linux.intel.com> Tue Apr 04 14:10:13 2017 -0700
tree bb473a491f791be1c0f9c42b66c4b700ff151d74
parent 7e3c4d22083f6e7316c5229b6197ca2d5335aa35

KEYS: Keyring asymmetric key restrict method with chaining

Add a restrict_link_by_key_or_keyring_chain link restriction that
searches for signing keys in the destination keyring in addition to the
signing key or keyring designated when the destination keyring was
created. Userspace enables this behavior by including the "chain" option
in the keyring restriction:

  keyctl(KEYCTL_RESTRICT_KEYRING, keyring, "asymmetric",
         "key_or_keyring:<signing key>:chain");

Signed-off-by: Mat Martineau <mathew.j.martineau@linux.intel.com>