tree 02cf0a1e85920122e1059496942b979e5832ff1b
parent 0c2c9a3fc77e8b60d43d9bd2ca46eb4dddb0ff76
author David Howells <dhowells@redhat.com> 1251879235 +0100
committer James Morris <jmorris@namei.org> 1251890949 +1000

KEYS: Flag dead keys to induce EKEYREVOKED [try #6]

Set the KEY_FLAG_DEAD flag on keys for which the type has been removed.  This
causes the key_permission() function to return EKEYREVOKED in response to
various commands.  It does not, however, prevent unlinking or clearing of
keyrings from detaching the key.

Signed-off-by: David Howells <dhowells@redhat.com>
Acked-by: Serge Hallyn <serue@us.ibm.com>
Signed-off-by: James Morris <jmorris@namei.org>