Linux kernel mirror (for testing) git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git
kernel os linux

KEYS: initialize root uid and session keyrings early

In order to create the integrity keyrings (eg. _evm, _ima), root's
uid and session keyrings need to be initialized early.

Signed-off-by: Mimi Zohar <zohar@us.ibm.com>
Signed-off-by: David Howells <dhowells@redhat.com>

authored by

Mimi Zohar and committed by
David Howells
c124bde2 09fbc473

+10
+10
security/keys/process_keys.c
··· 857 857 858 858 commit_creds(new); 859 859 } 860 + 861 + /* 862 + * Make sure that root's user and user-session keyrings exist. 863 + */ 864 + static int __init init_root_keyring(void) 865 + { 866 + return install_user_keyrings(); 867 + } 868 + 869 + late_initcall(init_root_keyring);