Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I'm working on building an application that needs to use the group keyring to share some sensitive data between processes with different owners. Whenever I try to access the group keyring (e.g."@g") using either the keyctl command or the underlying API, I get an error.

I'm guessing I have to set some kind of state to let it know which of my groups to get the keyring for, but documentation on this kernel feature is sparse. Anybody know how to make it work for groups?

share|improve this question
add comment

1 Answer

up vote 1 down vote accepted

Is the group keyring yet implemented at all? It wasn't couple of years ago, and even the kernel 3.2.9 source file security/keys/keyctl.c shows this:

    case KEY_REQKEY_DEFL_GROUP_KEYRING:
    default:
            ret = -EINVAL;
            goto error;
    }

and keyctl man page (in Fedora 16) states:

   (*) Group specific keyring: @g or -6

   This is a place holder for a group specific keyring, but is not actually implemented yet in the kernel.
share|improve this answer
    
That would explain things. I've been over that man page and the kernel keys documentation a lot over the last week, but that particular item slipped past me. Thanks for pointing it out. –  Travis Jensen Mar 8 '12 at 17:59
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.