Linux 6.4 Allows For Optional CA Enforcement Of The Machine Keyring
With the Linux 6.4 kernel there is the ability being introduced so that the machine keyring can optionally only store CA-enforced keys.
Eric Snowberg Certificate Authority Machine Owner Keys Integrity Measurement Architecture Inux Hardware Reviews Inux Hardware Benchmarks
Source: phoronix.com