Lines Matching refs:process
72 are used to control what a process may do to a key from userspace, and
152 (*) Each process subscribes to three keyrings: a thread-specific keyring, a
153 process-specific keyring, and a session-specific keyring.
159 The process-specific keyring is replaced with an empty one in the child on
161 shared. execve also discards the process's process keyring and creates a
166 process can, however, replace its current session keyring with a new one
177 When a process changes its real UID, if it used to have no session key, it
180 If a process attempts to access its session key when it doesn't have one,
204 userspace to request a key that can't be found in a process's keyrings.
241 keyring to a key, a process must have Write permission on the keyring and
273 properly initialize keycreate during the login process. Otherwise, they will
278 boot process, before root has a chance to log in.
281 their associated thread, and both session and process keyrings are handled
300 the reading process whether or not it possesses them. Note that LSM
302 the current process is not authorised to view.
378 process making the call:
383 KEY_SPEC_PROCESS_KEYRING -2 process-specific keyring
404 type. The process must also have permission to write to the key to be able
410 to the keyring. In this case, an error will be generated if the process
435 (*) Search the process's keyrings for a key, potentially calling out to
442 This function searches all the process's keyrings in the order thread,
443 process, session for a matching key. This works very much like
456 (*) Map a special key ID to a real key ID for this process:
469 (*) Replace the session keyring this process subscribes to with a new one:
473 If name is NULL, an anonymous keyring is created attached to the process
476 If name is not NULL, if a keyring of that name exists, the process
482 the process's ownership.
494 type. The process must also have permission to write to the key to be able
519 group ID to something other than the calling process's group ID or one of
547 A process must have view permission on the key for this function to be
568 process must have write permission on the keyring, and it must be a
580 This function creates a link from the keyring to the key. The process must
601 ignored. The process must have write permission on the keyring.
617 The process must have search permission on the top level keyring, or else
618 error EACCES will result. Only keyrings that the process has search
620 a process has search permission can be matched. If the specified keyring
637 into the buffer. The process must have read permission on the key to
664 invoked process returns, or else the key will be marked negative
667 The process must have write access on the key to be able to instantiate
689 invoked process returns if it is unable to fulfill the request.
691 The process must have write access on the key to be able to instantiate
730 the process keyring if there is one, otherwise the session keyring if
742 The process must have attribute modification access on a key to set its
786 A process must have view permission on the key for this function to be
790 (*) Install the calling process's session keyring on its parent.
794 This functions attempts to install the calling process's session keyring
795 on to the calling process's parent, replacing the parent's current session
798 The calling process must have the same ownership as its parent, the
799 keyring must have the same ownership as the calling process, the calling
800 process must have LINK permission on the keyring and the active LSM module
806 The keyring will be replaced next time the parent process leaves the
823 A process must have search permission on the key for this function to be
1043 keyring in a process's keyrings. A keyring thus found can then be searched
1354 instantiation process, whether or not it succeeds, whether or not there's
1390 <key> is the key being constructed, and the three keyrings are the process
1391 keyrings from the process that caused the search to be issued. These are
1400 access any more keys. It may then look around for a user specific process to