tree aa7a3fe1afeffd5f6c08cb78228a82d1da56e018
parent e14555e3d0e9edfad0a6840c0152f71aba97e793
author Nayna Jain <nayna@linux.ibm.com> 1572492691 -0400
committer Michael Ellerman <mpe@ellerman.id.au> 1573521950 +1100

certs: Add wrapper function to check blacklisted binary hash

The -EKEYREJECTED error returned by existing is_hash_blacklisted() is
misleading when called for checking against blacklisted hash of a
binary.

This patch adds a wrapper function is_binary_blacklisted() to return
-EPERM error if binary is blacklisted.

Signed-off-by: Nayna Jain <nayna@linux.ibm.com>
Reviewed-by: Mimi Zohar <zohar@linux.ibm.com>
Signed-off-by: Michael Ellerman <mpe@ellerman.id.au>
Link: https://lore.kernel.org/r/1572492694-6520-7-git-send-email-zohar@linux.ibm.com