linux-toradex.git/Documentation/keys.txt, branch v2.6.30-rc5

Documentation cleanup: trivial misspelling, punctuation, and grammar corrections.

2008-07-26T19:00:06+00:00

Cc: Randy Dunlap 
Signed-off-by: Andrew Morton 
Signed-off-by: Linus Torvalds

keys: make the keyring quotas controllable through /proc/sys

2008-04-29T15:06:17+00:00

Make the keyring quotas controllable through /proc/sys files:

 (*) /proc/sys/kernel/keys/root_maxkeys
     /proc/sys/kernel/keys/root_maxbytes

     Maximum number of keys that root may have and the maximum total number of
     bytes of data that root may have stored in those keys.

 (*) /proc/sys/kernel/keys/maxkeys
     /proc/sys/kernel/keys/maxbytes

     Maximum number of keys that each non-root user may have and the maximum
     total number of bytes of data that each of those users may have stored in
     their keys.

Also increase the quotas as a number of people have been complaining that it's
not big enough.  I'm not sure that it's big enough now either, but on the
other hand, it can now be set in /etc/sysctl.conf.

Signed-off-by: David Howells 
Cc: 
Cc: 
Cc: 
Signed-off-by: Andrew Morton 
Signed-off-by: Linus Torvalds

keys: add keyctl function to get a security label

2008-04-29T15:06:16+00:00

Add a keyctl() function to get the security label of a key.

The following is added to Documentation/keys.txt:

 (*) Get the LSM security context attached to a key.

	long keyctl(KEYCTL_GET_SECURITY, key_serial_t key, char *buffer,
		    size_t buflen)

     This function returns a string that represents the LSM security context
     attached to a key in the buffer provided.

     Unless there's an error, it always returns the amount of data it could
     produce, even if that's too big for the buffer, but it won't copy more
     than requested to userspace. If the buffer pointer is NULL then no copy
     will take place.

     A NUL character is included at the end of the string if the buffer is
     sufficiently big.  This is included in the returned count.  If no LSM is
     in force then an empty string will be returned.

     A process must have view permission on the key for this function to be
     successful.

[akpm@linux-foundation.org: declare keyctl_get_security()]
Signed-off-by: David Howells 
Acked-by: Stephen Smalley 
Cc: Paul Moore 
Cc: Chris Wright 
Cc: James Morris 
Cc: Kevin Coffman 
Signed-off-by: Andrew Morton 
Signed-off-by: Linus Torvalds

keys: allow the callout data to be passed as a blob rather than a string

2008-04-29T15:06:16+00:00

Allow the callout data to be passed as a blob rather than a string for
internal kernel services that call any request_key_*() interface other than
request_key().  request_key() itself still takes a NUL-terminated string.

The functions that change are:

	request_key_with_auxdata()
	request_key_async()
	request_key_async_with_auxdata()

Signed-off-by: David Howells 
Cc: Paul Moore 
Cc: Chris Wright 
Cc: Stephen Smalley 
Cc: James Morris 
Cc: Kevin Coffman 
Signed-off-by: Andrew Morton 
Signed-off-by: Linus Torvalds

KEYS: Make request_key() and co fundamentally asynchronous

2007-10-17T15:42:57+00:00

Make request_key() and co fundamentally asynchronous to make it easier for
NFS to make use of them.  There are now accessor functions that do
asynchronous constructions, a wait function to wait for construction to
complete, and a completion function for the key type to indicate completion
of construction.

Note that the construction queue is now gone.  Instead, keys under
construction are linked in to the appropriate keyring in advance, and that
anyone encountering one must wait for it to be complete before they can use
it.  This is done automatically for userspace.

The following auxiliary changes are also made:

 (1) Key type implementation stuff is split from linux/key.h into
     linux/key-type.h.

 (2) AF_RXRPC provides a way to allocate null rxrpc-type keys so that AFS does
     not need to call key_instantiate_and_link() directly.

 (3) Adjust the debugging macros so that they're -Wformat checked even if
     they are disabled, and make it so they can be enabled simply by defining
     __KDEBUG to be consistent with other code of mine.

 (3) Documentation.

[alan@lxorguk.ukuu.org.uk: keys: missing word in documentation]
Signed-off-by: David Howells 
Signed-off-by: Alan Cox 
Signed-off-by: Andrew Morton 
Signed-off-by: Linus Torvalds

Fix a typo in Documentation/keys.txt

2007-07-31T22:39:39+00:00

Signed-off-by: Satyam Sharma 
Acked-by: David Howells 
Signed-off-by: Andrew Morton 
Signed-off-by: Linus Torvalds

[AF_RXRPC]: Key facility changes for AF_RXRPC

2007-04-26T22:46:23+00:00

Export the keyring key type definition and document its availability.

Add alternative types into the key's type_data union to make it more useful.
Not all users necessarily want to use it as a list_head (AF_RXRPC doesn't, for
example), so make it clear that it can be used in other ways.

Signed-off-by: David Howells 
Signed-off-by: David S. Miller

Fix typos in /Documentation : Misc

2006-11-30T04:21:10+00:00

This patch fixes typos in various Documentation txts. The patch addresses some
misc words.

Signed-off-by: Matt LaPlante 
Acked-by: Randy Dunlap 
Signed-off-by: Adrian Bunk

Documentation: remove duplicated words

2006-10-03T20:57:56+00:00

Remove many duplicated words under Documentation/ and do other small
cleanups.

Examples:
        "and and" --> "and"
        "in in" --> "in"
        "the the" --> "the"
        "the the" --> "to the"
        ...

Signed-off-by: Paolo Ornati 
Signed-off-by: Adrian Bunk

Fix typos in Documentation/: 'H'-'M'

2006-10-03T20:50:39+00:00

This patch fixes typos in various Documentation txts. The patch addresses
some words starting with the letters 'H'-'M'.

Signed-off-by: Matt LaPlante 
Acked-by: Randy Dunlap 
Signed-off-by: Adrian Bunk