LDP
/
man-pages
mirror of https://github.com/mkerrisk/man-pages
0
1
Fork 0
Code Releases Activity

user-keyring.7: Add details on user keyring lifetime 

Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
This commit is contained in:
Michael Kerrisk 2016-11-02 22:41:16 +01:00
parent d939f942ae
commit 2929ba6883
1 changed files with 16 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

23
man7/user-keyring.7
View File

@ -14,15 +14,24 @@
user-keyring \- per-user keyring
.SH DESCRIPTION
The user keyring is a keyring used to anchor keys on behalf of a user.
Each UID the kernel deals with has its own user keyring.
This keyring is associated with the record that the kernel maintains
for the UID and, once created, is retained as long as that record persists.
It is shared amongst all processes of that UID.
Each UID the kernel deals with has its own user keyring that
is shared by all processes with that UID.
The user keyring is created on demand when a thread requests it.
Normally, this happens when
The user keyring is associated with the record that the kernel maintains
for the UID.
It comes into existence upon the first attempt to access either the
user keyring, the
.BR user-session-keyring (7),
or the
.BR session-keyring (7).
The keyring remains pinned in existence so long as there are processes
running with that real UID or files opened by those processes remain open.
(The keyring can also be pinned indefinitely by linking it
into another keyring.)
Typically, the user keyring is created by
.BR pam_keyinit (8)
is invoked when a user logs in.
when a user logs in.
The user keyring is not searched by default by
.BR request_key (2).