certs/system_keyring: export restrict_link_by_builtin_*trusted

Saeed Mirzamohammadi · jfvogel · commit a5896097473f · 2026-01-28T12:13:30.000-08:00
This allows us to call these functions from modules, specifically
the standalone FIPS module (which we're adding support for in this patch
series).

Orabug: 38493695

Signed-off-by: Vegard Nossum &lt;vegard.nossum@oracle.com&gt;
Reviewed-by: Harshit Mogalapalli &lt;harshit.m.mogalapalli@oracle.com&gt;
Reviewed-by: Sherry Yang &lt;sherry.yang@oracle.com&gt;
diff --git a/certs/system_keyring.c b/certs/system_keyring.c
@@ -50,6 +50,7 @@ int restrict_link_by_builtin_trusted(struct key *dest_keyring,
 	return restrict_link_by_signature(dest_keyring, type, payload,
 					  builtin_trusted_keys);
 }
+EXPORT_SYMBOL_GPL(restrict_link_by_builtin_trusted);
 
 /**
  * restrict_link_by_digsig_builtin - Restrict digitalSignature key additions by the built-in keyring
@@ -102,6 +103,7 @@ int restrict_link_by_builtin_and_secondary_trusted(
 	return restrict_link_by_signature(dest_keyring, type, payload,
 					  secondary_trusted_keys);
 }
+EXPORT_SYMBOL_GPL(restrict_link_by_builtin_and_secondary_trusted);
 
 /**
  * restrict_link_by_digsig_builtin_and_secondary - Restrict by digitalSignature.

Original file line number	Diff line number	Diff line change
`@@ -50,6 +50,7 @@ int restrict_link_by_builtin_trusted(struct key *dest_keyring,`
`50`	`50`	`return restrict_link_by_signature(dest_keyring, type, payload,`
`51`	`51`	`builtin_trusted_keys);`
`52`	`52`	`}`
	`53`	`+EXPORT_SYMBOL_GPL(restrict_link_by_builtin_trusted);`
`53`	`54`
`54`	`55`	`/**`
`55`	`56`	`* restrict_link_by_digsig_builtin - Restrict digitalSignature key additions by the built-in keyring`
`@@ -102,6 +103,7 @@ int restrict_link_by_builtin_and_secondary_trusted(`
`102`	`103`	`return restrict_link_by_signature(dest_keyring, type, payload,`
`103`	`104`	`secondary_trusted_keys);`
`104`	`105`	`}`
	`106`	`+EXPORT_SYMBOL_GPL(restrict_link_by_builtin_and_secondary_trusted);`
`105`	`107`
`106`	`108`	`/**`
`107`	`109`	`* restrict_link_by_digsig_builtin_and_secondary - Restrict by digitalSignature.`