requestkey.conf: #OP TYPE DESCRIPTION CALLOUT INFO PROGRAM ARG1 ARG2 ARG3 ... #====== ======= =============== =============== =============================== create dns_resolver * * /sbin/key.dns_resolver %k create user debug:* negate /bin/keyctl negate %k 30 %S create user debug:* rejected /bin/keyctl reject %k 30 %c %S create user debug:* expired /bin/keyctl reject %k 30 %c %S create user debug:* revoked /bin/keyctl reject %k 30 %c %S create user debug:loop:* * |/bin/cat create user debug:* * /usr/share/keyutils/request-key-debug.sh %k %d %c %S create dns_resolver * * /usr/sbin/cifs.upcall %k negate * * * /bin/keyctl negate %k 30 %S create cifs.spnego * * /usr/sbin/cifs.upcall -l -t -c %k #create cifs.spnego * * /usr/sbin/cifs.upcall -t -c %k
requestkey.conf: ======= ======= ======= === dns_resolver %k keyutils/ request- key-debug. sh %k %d %c %S cifs.upcall %k cifs.upcall -l -t -c %k cifs.upcall -t -c %k
#OP TYPE DESCRIPTION CALLOUT INFO PROGRAM ARG1 ARG2 ARG3 ...
#====== ======= =============== =============== =======
create dns_resolver * * /sbin/key.
create user debug:* negate /bin/keyctl negate %k 30 %S
create user debug:* rejected /bin/keyctl reject %k 30 %c %S
create user debug:* expired /bin/keyctl reject %k 30 %c %S
create user debug:* revoked /bin/keyctl reject %k 30 %c %S
create user debug:loop:* * |/bin/cat
create user debug:* * /usr/share/
create dns_resolver * * /usr/sbin/
negate * * * /bin/keyctl negate %k 30 %S
create cifs.spnego * * /usr/sbin/
#create cifs.spnego * * /usr/sbin/