Messages in this thread | | | Subject | Re: [PATCH] KEYS: Allow special keyrings to be cleared | From | Trond Myklebust <> | Date | Fri, 11 Nov 2011 17:41:57 -0500 |
| |
On Fri, 2011-11-11 at 16:07 +0000, David Howells wrote: > The kernel contains some special internal keyrings, for instance the DNS > resolver keyring : > > 2a93faf1 I----- 1 perm 1f030000 0 0 keyring .dns_resolver: empty > > It would occasionally be useful to allow the contents of such keyrings to be > flushed by root (cache invalidation). > > Allow a flag to be set on a keyring to mark that someone possessing the > sysadmin capability can clear the keyring, even without normal write access to > the keyring. > > Set this flag on the special keyrings created by the DNS resolver, the NFS > identity mapper and the CIFS identity mapper. > > Signed-off-by: David Howells <dhowells@redhat.com> > Acked-by: Jeff Layton <jlayton@redhat.com> > Acked-by: Steve Dickson <steved@redhat.com> Acked-by: Trond Myklebust <Trond.Myklebust@netapp.com>
-- Trond Myklebust Linux NFS client maintainer
NetApp Trond.Myklebust@netapp.com www.netapp.com
| |