diff options
| author | Christian Brauner <brauner@kernel.org> | 2026-10-12 12:38:40 +0200 |
|---|---|---|
| committer | Christian Brauner <brauner@kernel.org> | 2026-10-12 23:37:42 +0200 |
| commit | 503b65da9a7e5447d91222f62399522f2f62a0fa (patch) | |
| tree | afc148be5728d2561a3680eb0060b7dfe586e3a0 /include/uapi/linux | |
| parent | 592d26f625acef962aa40d1f22f29388bc05de13 (diff) | |
| parent | bde0f0bcc5d040cc2f6f5cdd15a87635cea93f56 (diff) | |
| download | linux-next-503b65da9a7e5447d91222f62399522f2f62a0fa.tar.gz linux-next-503b65da9a7e5447d91222f62399522f2f62a0fa.zip | |
Merge patch series "keys: Add well known IDs for fs-verity/dm-verity keys"
Andrew Halaney <andrew@amutable.com> says:
This more or less follows the bpf keyring approach, allowing userspace
to easily find the keys instead of having to parse /proc/keys.
* patches from https://patch.msgid.link/20261008-ajhalaney-dmverity-key-identifier-v2-0-008456d189cb@amutable.com:
Documentation: keys: document IDs added since KEY_SPEC_REQKEY_AUTH_KEY
keys: add KEY_SPEC_FS_VERITY_KEYRING
keys: add KEY_SPEC_DM_VERITY_KEYRING
Link: https://patch.msgid.link/20261008-ajhalaney-dmverity-key-identifier-v2-0-008456d189cb@amutable.com
Signed-off-by: Christian Brauner (Amutable) <brauner@kernel.org>
Diffstat (limited to 'include/uapi/linux')
| -rw-r--r-- | include/uapi/linux/keyctl.h | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/include/uapi/linux/keyctl.h b/include/uapi/linux/keyctl.h index fa85b9760391..00cc0942203e 100644 --- a/include/uapi/linux/keyctl.h +++ b/include/uapi/linux/keyctl.h @@ -25,6 +25,8 @@ #define KEY_SPEC_REQKEY_AUTH_KEY -7 /* - key ID for assumed request_key auth key */ #define KEY_SPEC_REQUESTOR_KEYRING -8 /* - key ID for request_key() dest keyring */ #define KEY_SPEC_BPF_KEYRING -9 /* - key ID for the BPF-specific keyring */ +#define KEY_SPEC_DM_VERITY_KEYRING -10 /* - key ID for the .dm-verity keyring */ +#define KEY_SPEC_FS_VERITY_KEYRING -11 /* - key ID for the .fs-verity keyring */ /* request-key default keyrings */ #define KEY_REQKEY_DEFL_NO_CHANGE -1 |