• Mat Martineau's avatar
    KEYS: Add KEYCTL_RESTRICT_KEYRING · 6563c91f
    Mat Martineau authored
    Keyrings recently gained restrict_link capabilities that allow
    individual keys to be validated prior to linking.  This functionality
    was only available using internal kernel APIs.
    
    With the KEYCTL_RESTRICT_KEYRING command existing keyrings can be
    configured to check the content of keys before they are linked, and
    then allow or disallow linkage of that key to the keyring.
    
    To restrict a keyring, call:
    
      keyctl(KEYCTL_RESTRICT_KEYRING, key_serial_t keyring, const char *type,
             const char *restriction)
    
    where 'type' is the name of a registered key type and 'restriction' is a
    string describing how key linkage is to be restricted. The restriction
    option syntax is specific to each key type.
    Signed-off-by: default avatarMat Martineau <mathew.j.martineau@linux.intel.com>
    6563c91f
compat.c 3.79 KB