Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 1 | /* keyctl.h: keyctl command IDs |
| 2 | * |
David Howells | 8bbf4976 | 2008-11-14 10:39:14 +1100 | [diff] [blame] | 3 | * Copyright (C) 2004, 2008 Red Hat, Inc. All Rights Reserved. |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 4 | * Written by David Howells (dhowells@redhat.com) |
| 5 | * |
| 6 | * This program is free software; you can redistribute it and/or |
| 7 | * modify it under the terms of the GNU General Public License |
| 8 | * as published by the Free Software Foundation; either version |
| 9 | * 2 of the License, or (at your option) any later version. |
| 10 | */ |
| 11 | |
| 12 | #ifndef _LINUX_KEYCTL_H |
| 13 | #define _LINUX_KEYCTL_H |
| 14 | |
| 15 | /* special process keyring shortcut IDs */ |
| 16 | #define KEY_SPEC_THREAD_KEYRING -1 /* - key ID for thread-specific keyring */ |
| 17 | #define KEY_SPEC_PROCESS_KEYRING -2 /* - key ID for process-specific keyring */ |
| 18 | #define KEY_SPEC_SESSION_KEYRING -3 /* - key ID for session-specific keyring */ |
| 19 | #define KEY_SPEC_USER_KEYRING -4 /* - key ID for UID-specific keyring */ |
| 20 | #define KEY_SPEC_USER_SESSION_KEYRING -5 /* - key ID for UID-session keyring */ |
| 21 | #define KEY_SPEC_GROUP_KEYRING -6 /* - key ID for GID-specific keyring */ |
David Howells | b5f545c | 2006-01-08 01:02:47 -0800 | [diff] [blame] | 22 | #define KEY_SPEC_REQKEY_AUTH_KEY -7 /* - key ID for assumed request_key auth key */ |
David Howells | 8bbf4976 | 2008-11-14 10:39:14 +1100 | [diff] [blame] | 23 | #define KEY_SPEC_REQUESTOR_KEYRING -8 /* - key ID for request_key() dest keyring */ |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 24 | |
David Howells | 3e30148 | 2005-06-23 22:00:56 -0700 | [diff] [blame] | 25 | /* request-key default keyrings */ |
| 26 | #define KEY_REQKEY_DEFL_NO_CHANGE -1 |
| 27 | #define KEY_REQKEY_DEFL_DEFAULT 0 |
| 28 | #define KEY_REQKEY_DEFL_THREAD_KEYRING 1 |
| 29 | #define KEY_REQKEY_DEFL_PROCESS_KEYRING 2 |
| 30 | #define KEY_REQKEY_DEFL_SESSION_KEYRING 3 |
| 31 | #define KEY_REQKEY_DEFL_USER_KEYRING 4 |
| 32 | #define KEY_REQKEY_DEFL_USER_SESSION_KEYRING 5 |
| 33 | #define KEY_REQKEY_DEFL_GROUP_KEYRING 6 |
David Howells | 8bbf4976 | 2008-11-14 10:39:14 +1100 | [diff] [blame] | 34 | #define KEY_REQKEY_DEFL_REQUESTOR_KEYRING 7 |
David Howells | 3e30148 | 2005-06-23 22:00:56 -0700 | [diff] [blame] | 35 | |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 36 | /* keyctl commands */ |
| 37 | #define KEYCTL_GET_KEYRING_ID 0 /* ask for a keyring's ID */ |
| 38 | #define KEYCTL_JOIN_SESSION_KEYRING 1 /* join or start named session keyring */ |
| 39 | #define KEYCTL_UPDATE 2 /* update a key */ |
| 40 | #define KEYCTL_REVOKE 3 /* revoke a key */ |
| 41 | #define KEYCTL_CHOWN 4 /* set ownership of a key */ |
| 42 | #define KEYCTL_SETPERM 5 /* set perms on a key */ |
| 43 | #define KEYCTL_DESCRIBE 6 /* describe a key */ |
| 44 | #define KEYCTL_CLEAR 7 /* clear contents of a keyring */ |
| 45 | #define KEYCTL_LINK 8 /* link a key into a keyring */ |
| 46 | #define KEYCTL_UNLINK 9 /* unlink a key from a keyring */ |
| 47 | #define KEYCTL_SEARCH 10 /* search for a key in a keyring */ |
| 48 | #define KEYCTL_READ 11 /* read a key or keyring's contents */ |
| 49 | #define KEYCTL_INSTANTIATE 12 /* instantiate a partially constructed key */ |
| 50 | #define KEYCTL_NEGATE 13 /* negate a partially constructed key */ |
David Howells | 3e30148 | 2005-06-23 22:00:56 -0700 | [diff] [blame] | 51 | #define KEYCTL_SET_REQKEY_KEYRING 14 /* set default request-key keyring */ |
David Howells | 017679c | 2006-01-08 01:02:43 -0800 | [diff] [blame] | 52 | #define KEYCTL_SET_TIMEOUT 15 /* set key timeout */ |
David Howells | b5f545c | 2006-01-08 01:02:47 -0800 | [diff] [blame] | 53 | #define KEYCTL_ASSUME_AUTHORITY 16 /* assume request_key() authorisation */ |
David Howells | 70a5bb7 | 2008-04-29 01:01:26 -0700 | [diff] [blame] | 54 | #define KEYCTL_GET_SECURITY 17 /* get key security label */ |
David Howells | ee18d64 | 2009-09-02 09:14:21 +0100 | [diff] [blame] | 55 | #define KEYCTL_SESSION_TO_PARENT 18 /* apply session keyring to parent process */ |
David Howells | fdd1b94 | 2011-03-07 15:06:09 +0000 | [diff] [blame] | 56 | #define KEYCTL_REJECT 19 /* reject a partially constructed key */ |
David Howells | ee009e4a0 | 2011-03-07 15:06:20 +0000 | [diff] [blame] | 57 | #define KEYCTL_INSTANTIATE_IOV 20 /* instantiate a partially constructed key */ |
David Howells | fd75815 | 2012-05-11 10:56:56 +0100 | [diff] [blame] | 58 | #define KEYCTL_INVALIDATE 21 /* invalidate a key */ |
David Howells | f36f8c7 | 2013-09-24 10:35:19 +0100 | [diff] [blame] | 59 | #define KEYCTL_GET_PERSISTENT 22 /* get a user's persistent keyring */ |
Linus Torvalds | 1da177e | 2005-04-16 15:20:36 -0700 | [diff] [blame] | 60 | |
| 61 | #endif /* _LINUX_KEYCTL_H */ |