aboutsummaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorMichael Kerrisk <mtk.manpages@gmail.com>2017-02-10 10:51:55 +0100
committerMichael Kerrisk <mtk.manpages@gmail.com>2017-03-12 12:45:43 +0100
commit4e23dce354fb5c8324dd09558a9a44af553e45b4 (patch)
treed91c231996604cafaa50526d00aefede28deba72
parent16d9a8f9245eb4fdaf6521884f755e3b5018877b (diff)
downloadman-pages-4e23dce354fb5c8324dd09558a9a44af553e45b4.tar.gz
keyctl.2: Minor improvement to KEYCTL_INSTANTIATE description
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
-rw-r--r--man2/keyctl.27
1 files changed, 5 insertions, 2 deletions
diff --git a/man2/keyctl.2 b/man2/keyctl.2
index 1ce7a3d777..807864da91 100644
--- a/man2/keyctl.2
+++ b/man2/keyctl.2
@@ -870,12 +870,15 @@ is nonzero, then, subject to the same constraints and rules as
the instantiated key is linked into the keyring whose ID specified in
.IR arg5 .
-The caller must have the appropriate authorization key.
+The caller must have the appropriate authorization key,
+and once the uninstantiated key has been instantiated,
+the authorization key is revoked.
In other words, this operation is available only from a
.BR request-key (8)-style
program.
See
-.BR request_key (2).
+.BR request_key (2)
+for an explanation of uninstantiated keys and key instantiation.
This operation is exposed by
.I libkeyutils