Commit Graph

6704 Commits

Author SHA1 Message Date
Michael Kerrisk 05705bbaf1 request_key.2: SEE ALSO: add capabilities(7)
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-12-27 09:36:20 +01:00
Michael Kerrisk 442a3aeb49 request_key.2: Tweaks
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-12-27 09:36:20 +01:00
Michael Kerrisk 466c3cd80f request_key.2: srcfix: remove FIXME
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-12-27 09:36:20 +01:00
Michael Kerrisk 39709e8a50 add_key.2, keyrings.7: Migrate some info about key types from add_key(2) to keyrings(7)
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-12-27 09:36:20 +01:00
Michael Kerrisk 5685b18c27 add_key.2, keyctl.2, request_key.2, syscalls.2: Correct kernel version for keys syscalls
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-12-27 09:36:20 +01:00
Michael Kerrisk 919d820670 keyctl.2: Note rationale for Diffie-Hellman computation to keyctl()
Heavily based on text supplied by Mat Martineau.

As noted by Mat, further context can be found in
http://www.spinics.net/lists/keyrings/msg00654.html

    Re: [RFC] Deriving Diffie-Hellman values through keyctl
    From: Mat Martineau <mathew.j.martineau@xxxxxxxxxxxxxxx>
    Date: Thu, 24 Mar 2016 12:02:57 -0700 (PDT)
    Cc: linux-security-module@..., keyrings@...

Cowritten-by: Mat Martineau <mathew.j.martineau@linux.intel.com>
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-12-27 09:36:20 +01:00
Michael Kerrisk 0e5c391f5f keyctl.2: SEE ALSO: add some refs
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-12-27 09:36:19 +01:00
Michael Kerrisk 7b4861d924 keyctl.2: Tweaks after discussions with David Howells
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-12-27 09:36:19 +01:00
Michael Kerrisk ab3d151e07 keyctl.2: wfix
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-12-27 09:36:19 +01:00
Michael Kerrisk 4e9afdfc39 keyctl.2: Minor tweaks to KEYCTL_JOIN_SESSION_KEYRING text
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-12-27 09:36:19 +01:00
Michael Kerrisk 2329c6d0be keyctl.2: Reworking and improvement after discussions with David Howells
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-12-27 09:36:19 +01:00
Michael Kerrisk 38590ae0ff keyctl.2: Remove FIXMEs/update details after conversation with David Howells
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-12-27 09:36:19 +01:00
Michael Kerrisk 152d5aab8a keyctl.2: Improvements to KEYCTL_DH_COMPUTE text
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-12-27 09:36:19 +01:00
Michael Kerrisk 57850834e0 add_key.2: srcfix: FIXMEs
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-12-27 09:36:19 +01:00
Michael Kerrisk 939a290eb4 add_key.2: srcfix: FIXME
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-12-27 09:36:19 +01:00
Michael Kerrisk fbed92d31a add_key.2: Rework some text + remove FIXMEs after discussion with David Howells
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-12-27 09:36:19 +01:00
Michael Kerrisk 7ea452dc16 request_key.2: Update text/remove FIXMEs after discussion with David Howells
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-12-27 09:36:19 +01:00
Michael Kerrisk 737d8596fd keyctl.2: Add EPERM error for KEYCTL_GET_PERSISTENT
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-12-27 09:36:15 +01:00
Michael Kerrisk 46c0179ab7 dd_key.2, keyctl.2, request_key.2: ffix
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-12-27 09:36:15 +01:00
Michael Kerrisk 9879bf30e4 keyctl.2: tfix
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-12-27 09:36:15 +01:00
Michael Kerrisk b74b20aab0 keyctl.2: srcfix: FIXMEs
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-12-27 09:36:15 +01:00
Michael Kerrisk 962dd42d8a keyctl.2: tfix
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-12-27 09:36:15 +01:00
Michael Kerrisk 1fe70a6764 keyctl.2: srcfix: FIXME clean-up
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-12-27 09:36:15 +01:00
Michael Kerrisk 0e4229d916 keyctl.2: wfix
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-12-27 09:36:15 +01:00
Michael Kerrisk 293fcea036 keyctl.2: wfix + remove FIXME
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-12-27 09:36:15 +01:00
Michael Kerrisk 8c081d4e5d add_key.2: srcfix: FIXMEs
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-12-27 09:36:15 +01:00
Michael Kerrisk 51b9f6c050 request_key.2: srcfix: FIXME updates
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-12-27 09:36:15 +01:00
Michael Kerrisk 8c8033b102 request_key.2: srcfix: FIXME tidy-up
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-12-27 09:36:15 +01:00
Michael Kerrisk a2333608a4 request_key.2: srcfix: FIXME tidyup
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-12-27 09:36:15 +01:00
Michael Kerrisk f3ff1d07b4 request_key.2: Change argument name 'keyring' to 'dest_keyring'
Using 'dest_keyring' is more meaningful.

Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-12-27 09:36:15 +01:00
Michael Kerrisk 53705ead37 request_key.2: Further expand details of the request-key user-space callout
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-12-27 09:36:15 +01:00
Michael Kerrisk 61baf86979 request_key.2: ERRORS: add two EINVAL error cases
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-12-27 09:36:15 +01:00
Michael Kerrisk 8fa7ef41da request_key.2: srcfix: FIXME
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-12-27 09:36:15 +01:00
Michael Kerrisk a7c31ed8ef request_key.2: Add an example program
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-12-27 09:36:15 +01:00
Michael Kerrisk 6011de34ff request_key.2: SYNOPSIS: include <sys/types.h>
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-12-27 09:36:15 +01:00
Michael Kerrisk 120ea0c808 request_key.2: Add details on the use of authorization keys
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-12-27 09:36:15 +01:00
Michael Kerrisk 2e3b9c2aa7 request_key.2: Various improvements to description
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-12-27 09:36:15 +01:00
Michael Kerrisk c7e3fd59ed request_key.2: srcfix: add FIXME
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-12-27 09:36:15 +01:00
Michael Kerrisk 3d4f67dd5d request_key.2: Clarify that search of keyring tree is breadth-first
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-12-27 09:36:15 +01:00
Michael Kerrisk f627086804 request_key.2: Expand SEE ALSO list
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-12-27 09:36:15 +01:00
Michael Kerrisk d2f1788ee8 request_key.2: Add notes on libkeyutils wrapper function
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-12-27 09:36:15 +01:00
Michael Kerrisk e2eab9148d request_key.2: Minor wording fixes
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-12-27 09:36:15 +01:00
Michael Kerrisk a2b148c3ef request_key.2: Add VERSIONS and CONFORMING TO sections
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-12-27 09:36:15 +01:00
Michael Kerrisk 2b8d7f4460 request_key.2: wfix
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-12-27 09:36:15 +01:00
Michael Kerrisk fbc46ac47d request_key.2: Add references to kernel documentation files
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-12-27 09:36:14 +01:00
Michael Kerrisk 71d4559ca0 add_key.2: ERRORS: add an EINVAL error case
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-12-27 09:36:14 +01:00
Michael Kerrisk 37ab86d7d4 add_key.2: Further improve description of "user" and "logon" keys
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-12-27 09:36:14 +01:00
Michael Kerrisk 7b79153974 add_key.2: Add an example program
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-12-27 09:36:14 +01:00
Michael Kerrisk 5b8c606269 add_key.2: SYNOPSIS: include <sys/types.h>
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-12-27 09:36:14 +01:00
Michael Kerrisk bcf7337033 add_key.2: Document "big_key" key type
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-12-27 09:36:14 +01:00
Michael Kerrisk 632acae10c add_key.2: Add references to *-keyring(7) pages
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-12-27 09:36:14 +01:00
Michael Kerrisk d5e2b2c994 add_key.2: ERRORS: place in alphabetical order
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-12-27 09:36:14 +01:00
Michael Kerrisk 2c0a219bf6 add_key.2: Document the "logon" key type
Information drawn from the kernel source and the info in
kernel commit 9f6ed2ca257fa8650b876377833e6f14e272848b.

Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-12-27 09:36:14 +01:00
Michael Kerrisk 59c3c2df0c add_key.2: ffix
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-12-27 09:36:14 +01:00
Michael Kerrisk 047d68b722 add_key.2: Improve description of key type
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-12-27 09:36:14 +01:00
Michael Kerrisk bd73f2bfef add_key.2: Expand SEE ALSO list
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-12-27 09:36:14 +01:00
Michael Kerrisk 59d15a1c5c add_key.2: Add notes on libkeyutils wrapper function
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-12-27 09:36:14 +01:00
Michael Kerrisk 6430ef0ab8 add_key.2: Minor wording fixes
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-12-27 09:36:14 +01:00
Michael Kerrisk 92624b070f add_key.2: Add VERSIONS and CONFORMING TO sections
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-12-27 09:36:14 +01:00
Michael Kerrisk be2d8882c4 add_key.2: wfix
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-12-27 09:36:14 +01:00
Michael Kerrisk 2296186794 add_key.2: Add references to kernel documentation files
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-12-27 09:36:14 +01:00
Michael Kerrisk 5aebf66a7f keyctl.2: srcfix: FIXME
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-12-27 09:36:14 +01:00
Michael Kerrisk 6394674616 keyctl.2: srcfix: FIXME KEYCTL_NEGATE
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-12-27 09:36:14 +01:00
Michael Kerrisk a12693896a keyctl.2: ffix
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-12-27 09:36:14 +01:00
Michael Kerrisk 1f6c40f005 keyctl.2: Wording fixes for KEY_DESCRIBE
Avoid ambiguity w.r.t. "description".

Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-12-27 09:36:14 +01:00
Michael Kerrisk 303ec07a21 keyctl.2: Consolidate list of special keyring IDs to a single location
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-12-27 09:36:14 +01:00
Michael Kerrisk 0c1af0231f keyctl.2: srcfix: remove obsolete FIXME
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-12-27 09:36:14 +01:00
Michael Kerrisk e56eefd6b8 keyctl.2: Change license
Eugene Syromyatnikov and I are now the copyright holders,
and Eugene agreed with my suggestion to change the license.

Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-12-27 09:36:14 +01:00
Michael Kerrisk 8cc6b9a7c9 keyctl.2: srcfix: FIXME
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-12-27 09:36:14 +01:00
Michael Kerrisk ff91beca5b keyctl.2: ERRORS: add EINVAL error case for KEYCTL_SEARCH
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-12-27 09:36:14 +01:00
Michael Kerrisk 29806cc80e keyctl.2: wfix
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-12-27 09:36:14 +01:00
Michael Kerrisk e02acf2fdc keyctl.2: SYNOPSIS: include <sys/types.h>
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-12-27 09:36:13 +01:00
Michael Kerrisk 64f2f3e7a1 keyctl.2: wfix: "partially constructed key" ==> "uninstantiated key"
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-12-27 09:36:13 +01:00
Michael Kerrisk a6cca1b573 keyctl.2: Further details for KEYCTL_ASSUME_AUTHORITY
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-12-27 09:36:13 +01:00
Michael Kerrisk 8fbff3c7d7 keyctl.2: srcfix: FIXME
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-12-27 09:36:13 +01:00
Michael Kerrisk 5d711752e8 keyctl.2: srcfix: FIXME
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-12-27 09:36:13 +01:00
Michael Kerrisk 10c4bf2286 keyctl.2: Further details for KEYCTL_READ
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-12-27 09:36:13 +01:00
Michael Kerrisk 5c1cb82520 keyctl.2: Further detail for KEYCTL_REVOKE
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-12-27 09:36:13 +01:00
Michael Kerrisk 63eab5d8dd keyctl.2: Further details for KEYCTL_GET_KEYRING_ID
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-12-27 09:36:13 +01:00
Michael Kerrisk 6cec06d03a keyctl.2: srcfix: FIXME
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-12-27 09:36:13 +01:00
Michael Kerrisk 15164d8d61 keyctl.2: wfix
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-12-27 09:36:13 +01:00
Michael Kerrisk 3cc58bb81e keyctl.2: ERRORS: place in alphabetical order
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-12-27 09:36:13 +01:00
Michael Kerrisk b6cb00aa77 keyctl.2: tfix
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-12-27 09:36:13 +01:00
Michael Kerrisk f38147ac30 keyctl.2: wfix
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-12-27 09:36:13 +01:00
Michael Kerrisk f011ea5537 keyctl.2: Expand SEE ALSO list
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-12-27 09:36:13 +01:00
Michael Kerrisk be428596d5 keyctl.2: Add notes on libkeyutils wrapper functions
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-12-27 09:36:13 +01:00
Michael Kerrisk 57ce8d0fe3 keyctl.2: srcfix: update copyright
Note mtk and Eugene Syromyatnikov as copyright holders, and,
since virtually nothing remains of the original page, remove
David Howells.

Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-12-27 09:36:13 +01:00
Michael Kerrisk 53e88c3e98 keyctl.2: Rename 'option' argument to 'operation'
Yes, the kernel source says 'option', but 'operation' is
a more natural name.

Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-12-27 09:36:13 +01:00
Michael Kerrisk 1deb8c8ee8 keyctl.2: Improve KEYCTL_DH_COMPUTE details
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-12-27 09:36:13 +01:00
Michael Kerrisk f595473369 keyctl.2: Improve KEYCTL_GET_PERSISTENT details
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-12-27 09:36:13 +01:00
Michael Kerrisk 3234dd5f66 keyctl.2: Improve KEYCTL_SESSION_TO_PARENT details
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-12-27 09:36:13 +01:00
Michael Kerrisk 4887418925 keyctl.2: Improve KEYCTL_GET_SECURITY details
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-12-27 09:36:13 +01:00
Michael Kerrisk 076432afcb keyctl.2: Improve KEYCTL_ASSUME_AUTHORITY details
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-12-27 09:36:13 +01:00
Michael Kerrisk 0a45d56711 keyctl.2: Improve KEYCTL_SET_REQKEY_KEYRING details
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-12-27 09:36:13 +01:00
Michael Kerrisk 1f234c53ad keyctl.2: Improve KEYCTL_INVALIDATE details
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-12-27 09:36:13 +01:00
Michael Kerrisk adee707302 keyctl.2: Improve KEYCTL_SET_TIMEOUT details
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-12-27 09:36:13 +01:00
Michael Kerrisk 329c2892c0 keyctl.2: Improve KEYCTL_INSTANTIATE_IOV details
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-12-27 09:36:13 +01:00
Michael Kerrisk 8ab24543a8 keyctl.2: Improve KEYCTL_REJECT details
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-12-27 09:36:12 +01:00
Michael Kerrisk 39b91a53ca keyctl.2: Simplify KEYCTL_NEGATE details
This operation is just a special case of KEYCTL_REJECT

Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-12-27 09:36:12 +01:00
Michael Kerrisk 9f79744c9a keyctl.2: Improve KEYCTL_INSTANTIATE details
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
2016-12-27 09:36:12 +01:00