Commit c124bde2 authored Sep 04, 2013 by Mimi Zohar Committed by David Howells Sep 25, 2013

KEYS: initialize root uid and session keyrings early



In order to create the integrity keyrings (eg. _evm, _ima), root's
uid and session keyrings need to be initialized early.

Signed-off-by: Mimi Zohar <zohar@us.ibm.com>
Signed-off-by: David Howells <dhowells@redhat.com>

parent 09fbc473

security/keys/process_keys.c

+10 −0

Original line number	Diff line number	Diff line
		@@ -857,3 +857,13 @@ void key_change_session_keyring(struct callback_head *twork)

		commit_creds(new);
		}

		/*
		* Make sure that root's user and user-session keyrings exist.
		*/
		static int __init init_root_keyring(void)
		{
		return install_user_keyrings();
		}

		late_initcall(init_root_keyring);