Commit c124bde2 authored by Mimi Zohar's avatar Mimi Zohar Committed by David Howells
Browse files

KEYS: initialize root uid and session keyrings early 



In order to create the integrity keyrings (eg. _evm, _ima), root's
uid and session keyrings need to be initialized early.

Signed-off-by: default avatarMimi Zohar <zohar@us.ibm.com>
Signed-off-by: default avatarDavid Howells <dhowells@redhat.com>
parent 09fbc473

security/keys/process_keys.c

+10 −0
Original line number Diff line number Diff line
@@ -857,3 +857,13 @@ void key_change_session_keyring(struct callback_head *twork) 


	commit_creds(new);

}



/*

 * Make sure that root's user and user-session keyrings exist.

 */

static int __init init_root_keyring(void)

{

	return install_user_keyrings();

}



late_initcall(init_root_keyring);