KEYS: initialize root uid and session keyrings early
In order to create the integrity keyrings (eg. _evm, _ima), root's uid and session keyrings need to be initialized early. Signed-off-by: Mimi Zohar <zohar@us.ibm.com> Signed-off-by: David Howells <dhowells@redhat.com>
This commit is contained in:
parent
09fbc47373
commit
c124bde28b
1 changed files with 10 additions and 0 deletions
|
@ -857,3 +857,13 @@ void key_change_session_keyring(struct callback_head *twork)
|
||||||
|
|
||||||
commit_creds(new);
|
commit_creds(new);
|
||||||
}
|
}
|
||||||
|
|
||||||
|
/*
|
||||||
|
* Make sure that root's user and user-session keyrings exist.
|
||||||
|
*/
|
||||||
|
static int __init init_root_keyring(void)
|
||||||
|
{
|
||||||
|
return install_user_keyrings();
|
||||||
|
}
|
||||||
|
|
||||||
|
late_initcall(init_root_keyring);
|
||||||
|
|
Loading…
Reference in a new issue