Re: In-kernel Authentication Tokens (PAGs)

[Kyle Moffett]

On Jun 15, 2004, at 05:36, David Howells wrote:
> You might want to look at this patch. It's what I've come up with to 
> support
> kafs, but it's general, and should work for anything. It's been built 
> along
> Linus's guidelines, and has Linus's approval, contingent on something 
> actually
> using it fully.

One other thing that I'm not certain about in this patch is if there
is actually an important difference between "process" and
"session" key-rings.  I believe that the "session" distinction
should be left up to user-space software like PAM to determine
which key-ring "session" a process should belong to.  The user
and group key-rings are a good idea, so I guess the order with
which key-rings are checked for keys is:
	Thread
	Process
	Session???
	User
	Group

Cheers,
Kyle Moffett

-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/