| commit | 59183120c29e5e2747222b24de09484b7cd8cf17 | [log] [tgz] |
|---|---|---|
| author | Victor Hsieh <victorhsieh@google.com> | Wed Mar 20 15:52:45 2019 -0700 |
| committer | Victor Hsieh <victorhsieh@google.com> | Fri Mar 22 09:18:00 2019 -0700 |
| tree | e95aee4f80ae6f695c3b51cc9c0bf1d702d7c92b | |
| parent | b4ef0beb990d02600cad57096bcd20c9d646c8fa [diff] |
Initialize fs-verity keys in shell script
This gives us two benefits:
- Better compatibility to keyctl(1), which doesn't have "dadd"
- Pave the way to specify key's security labels, since keyctl(1)
doesn't support, and we want to avoid adding incompatible option.
Test: See keys loaded in /proc/keys
Bug: 128607724
Change-Id: Ia45f6e9dea80d037c0820cf1fd2bc9d7c8bb6302