aboutsummaryrefslogtreecommitdiffstats
path: root/man7/user-keyring.7
diff options
context:
space:
mode:
authorMichael Kerrisk <mtk.manpages@gmail.com>2017-08-18 00:59:04 +0200
committerMichael Kerrisk <mtk.manpages@gmail.com>2017-08-18 00:59:04 +0200
commita721e8b25faf1a33d32961f5b22fdfa0f4a82515 (patch)
treebbf2ffdfa587d418ca2da922a66d06ec7f78a575 /man7/user-keyring.7
parent38db2ef4d0af619b8108fecd2e4b7b7062d59da6 (diff)
downloadman-pages-a721e8b25faf1a33d32961f5b22fdfa0f4a82515.tar.gz
aio.7, arp.7, attributes.7, boot.7, cgroups.7, cpuset.7, credentials.7, fanotify.7, fifo.7, glob.7, hier.7, hostname.7, icmp.7, inode.7, inotify.7, keyrings.7, libc.7, mailaddr.7, mount_namespaces.7, mq_overview.7, nptl.7, numa.7, path_resolution.7, persistent-keyring.7, pid_namespaces.7, pipe.7, pkeys.7, process-keyring.7, pthreads.7, pty.7, random.7, sched.7, sem_overview.7, session-keyring.7, shm_overview.7, signal-safety.7, signal.7, spufs.7, standards.7, symlink.7, termio.7, thread-keyring.7, time.7, unicode.7, user-keyring.7, user-session-keyring.7, user_namespaces.7, utf-8.7, xattr.7: ffix
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
Diffstat (limited to 'man7/user-keyring.7')
-rw-r--r--man7/user-keyring.712
1 files changed, 6 insertions, 6 deletions
diff --git a/man7/user-keyring.7 b/man7/user-keyring.7
index 298c319d6b..29de53b761 100644
--- a/man7/user-keyring.7
+++ b/man7/user-keyring.7
@@ -21,7 +21,7 @@ The user keyring has a name (description) of the form
where
.I <UID>
is the user ID of the corresponding user.
-
+.PP
The user keyring is associated with the record that the kernel maintains
for the UID.
It comes into existence upon the first attempt to access either the
@@ -33,28 +33,28 @@ The keyring remains pinned in existence so long as there are processes
running with that real UID or files opened by those processes remain open.
(The keyring can also be pinned indefinitely by linking it
into another keyring.)
-
+.PP
Typically, the user keyring is created by
.BR pam_keyinit (8)
when a user logs in.
-
+.PP
The user keyring is not searched by default by
.BR request_key (2).
When
.BR pam_keyinit (8)
creates a session keyring, it adds to it a link to the user
keyring so that the user keyring will be searched when the session keyring is.
-
+.PP
A special serial number value,
.BR KEY_SPEC_USER_KEYRING ,
is defined that can be used in lieu of the actual serial number of
the calling process's user keyring.
-
+.PP
From the
.BR keyctl (1)
utility, '\fB@u\fP' can be used instead of a numeric key ID in
much the same way.
-
+.PP
User keyrings are independent of
.BR clone (2),
.BR fork (2),