KEYS: Add a new keyctl op to reject a key with a specified error code
authorDavid Howells <dhowells@redhat.com>
Mon, 7 Mar 2011 15:06:09 +0000 (15:06 +0000)
committerJames Morris <jmorris@namei.org>
Tue, 8 Mar 2011 00:17:18 +0000 (11:17 +1100)
commitfdd1b94581782a2ddf9124414e5b7a5f48ce2f9c
treece83bfd1f0b1a7d4b9521bdb3d6afef1bff1d4f2
parentb9fffa3877a3ebbe0a5ad5a247358e2f7df15b24
KEYS: Add a new keyctl op to reject a key with a specified error code

Add a new keyctl op to reject a key with a specified error code.  This works
much the same as negating a key, and so keyctl_negate_key() is made a special
case of keyctl_reject_key().  The difference is that keyctl_negate_key()
selects ENOKEY as the error to be reported.

Typically the key would be rejected with EKEYEXPIRED, EKEYREVOKED or
EKEYREJECTED, but this is not mandatory.

Signed-off-by: David Howells <dhowells@redhat.com>
Signed-off-by: James Morris <jmorris@namei.org>
Documentation/keys-request-key.txt
Documentation/keys.txt
include/linux/key-type.h
include/linux/key.h
include/linux/keyctl.h
security/keys/compat.c
security/keys/internal.h
security/keys/key.c
security/keys/keyctl.c
security/keys/keyring.c
security/keys/request_key.c