From d939f942aefe7dbb6f98acd748b1fb9a50204625 Mon Sep 17 00:00:00 2001 From: Michael Kerrisk Date: Wed, 2 Nov 2016 22:09:37 +0100 Subject: [PATCH] session-keyring.7: Add some details on session keyring lifetime Signed-off-by: Michael Kerrisk --- man7/session-keyring.7 | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/man7/session-keyring.7 b/man7/session-keyring.7 index 51c3cfaab..f494800e3 100644 --- a/man7/session-keyring.7 +++ b/man7/session-keyring.7 @@ -18,6 +18,8 @@ It is typically created by .BR pam_keyinit (8) when a user logs in and a link will be added that refers to the .BR user-keyring (7). +Optionally, PAM may revoke the session keyring on logout. +(In typical configurations, PAM does do this revocation.) A special serial number value, .BR KEY_SPEC_SESSION_KEYRING , @@ -46,6 +48,9 @@ under certain circumstances, the .BR user-session-keyring (7) will be attached as the session keyring and under others a new session keyring will be created. +(See +.BR user-session-keyring (7) +for further details.) .SS Special operations The .I keyutils