tree ce83bfd1f0b1a7d4b9521bdb3d6afef1bff1d4f2
parent b9fffa3877a3ebbe0a5ad5a247358e2f7df15b24
author David Howells <dhowells@redhat.com> 1299510369 +0000
committer James Morris <jmorris@namei.org> 1299543438 +1100

KEYS: Add a new keyctl op to reject a key with a specified error code

Add a new keyctl op to reject a key with a specified error code.  This works
much the same as negating a key, and so keyctl_negate_key() is made a special
case of keyctl_reject_key().  The difference is that keyctl_negate_key()
selects ENOKEY as the error to be reported.

Typically the key would be rejected with EKEYEXPIRED, EKEYREVOKED or
EKEYREJECTED, but this is not mandatory.

Signed-off-by: David Howells <dhowells@redhat.com>
Signed-off-by: James Morris <jmorris@namei.org>