1 # SOME DESCRIPTIVE TITLE
2 # Copyright (C) YEAR Free Software Foundation, Inc.
3 # This file is distributed under the same license as the PACKAGE package.
4 # FIRST AUTHOR <EMAIL@ADDRESS>, YEAR.
9 "Project-Id-Version: PACKAGE VERSION\n"
10 "POT-Creation-Date: 2015-01-23 22:24+0900\n"
11 "PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
12 "Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
13 "Language-Team: LANGUAGE <LL@li.org>\n"
16 "Content-Type: text/plain; charset=UTF-8\n"
17 "Content-Transfer-Encoding: 8bit\n"
20 #: build/C/man2/add_key.2:11
26 #: build/C/man2/add_key.2:11 build/C/man2/request_key.2:11
32 #: build/C/man2/add_key.2:11 build/C/man2/keyctl.2:27 build/C/man2/request_key.2:11
38 #: build/C/man2/add_key.2:11 build/C/man2/keyctl.2:27 build/C/man2/request_key.2:11
40 msgid "Linux Key Management Calls"
44 #: build/C/man2/add_key.2:12 build/C/man2/keyctl.2:28 build/C/man2/request_key.2:12
50 #: build/C/man2/add_key.2:14
51 msgid "add_key - add a key to the kernel's key management facility"
55 #: build/C/man2/add_key.2:14 build/C/man2/keyctl.2:30 build/C/man2/request_key.2:14
61 #: build/C/man2/add_key.2:17 build/C/man2/keyctl.2:33 build/C/man2/request_key.2:17
63 msgid "B<#include E<lt>keyutils.hE<gt>>\n"
67 #: build/C/man2/add_key.2:21
70 "B<key_serial_t add_key(const char *>I<type>B<, const char "
71 "*>I<description>B<,>\n"
72 "B< const void *>I<payload>B<, size_t >I<plen>B<,>\n"
73 "B< key_serial_t >I<keyring>B<);>\n"
77 #: build/C/man2/add_key.2:22 build/C/man2/keyctl.2:36 build/C/man2/request_key.2:22
83 #: build/C/man2/add_key.2:35
85 "B<add_key>() asks the kernel to create or update a key of the given I<type> "
86 "and I<description>, instantiate it with the I<payload> of length I<plen>, "
87 "and to attach it to the nominated I<keyring> and to return its serial "
92 #: build/C/man2/add_key.2:38
94 "The key type may reject the data if it's in the wrong format or in some "
99 #: build/C/man2/add_key.2:46
101 "If the destination I<keyring> already contains a key that matches the "
102 "specified I<type> and I<description,> then, if the key type supports it, "
103 "that key will be updated rather than a new key being created; if not, a new "
104 "key will be created and it will displace the link to the extant key from the "
109 #: build/C/man2/add_key.2:51
111 "The destination I<keyring> serial number may be that of a valid keyring to "
112 "which the caller has write permission, or it may be a special keyring ID:"
116 #: build/C/man2/add_key.2:51 build/C/man2/request_key.2:74
118 msgid "B<KEY_SPEC_THREAD_KEYRING>"
122 #: build/C/man2/add_key.2:54 build/C/man2/request_key.2:77
123 msgid "This specifies the caller's thread-specific keyring."
127 #: build/C/man2/add_key.2:54 build/C/man2/request_key.2:77
129 msgid "B<KEY_SPEC_PROCESS_KEYRING>"
133 #: build/C/man2/add_key.2:57 build/C/man2/request_key.2:80
134 msgid "This specifies the caller's process-specific keyring."
138 #: build/C/man2/add_key.2:57 build/C/man2/request_key.2:80
140 msgid "B<KEY_SPEC_SESSION_KEYRING>"
144 #: build/C/man2/add_key.2:60 build/C/man2/request_key.2:83
145 msgid "This specifies the caller's session-specific keyring."
149 #: build/C/man2/add_key.2:60 build/C/man2/request_key.2:83
151 msgid "B<KEY_SPEC_USER_KEYRING>"
155 #: build/C/man2/add_key.2:63 build/C/man2/request_key.2:86
156 msgid "This specifies the caller's UID-specific keyring."
160 #: build/C/man2/add_key.2:63 build/C/man2/request_key.2:86
162 msgid "B<KEY_SPEC_USER_SESSION_KEYRING>"
166 #: build/C/man2/add_key.2:66 build/C/man2/request_key.2:89
167 msgid "This specifies the caller's UID-session keyring."
171 #: build/C/man2/add_key.2:66
177 #: build/C/man2/add_key.2:69
179 "There are a number of key types available in the core key management code, "
180 "and these can be specified to this function:"
184 #: build/C/man2/add_key.2:69
190 #: build/C/man2/add_key.2:80
192 "Keys of the user-defined key type may contain a blob of arbitrary data, and "
193 "the I<description> may be any valid string, though it is preferred that the "
194 "description be prefixed with a string representing the service to which the "
195 "key is of interest and a colon (for instance ``B<afs:mykey>''). The "
196 "I<payload> may be empty or NULL for keys of this type."
200 #: build/C/man2/add_key.2:80
202 msgid "B<``keyring''>"
206 #: build/C/man2/add_key.2:89
208 "Keyrings are special key types that may contain links to sequences of other "
209 "keys of any type. If this interface is used to create a keyring, then a "
210 "NULL I<payload> should be specified, and I<plen> should be zero."
214 #: build/C/man2/add_key.2:89 build/C/man2/keyctl.2:97 build/C/man2/request_key.2:94
220 #: build/C/man2/add_key.2:95
222 "On success B<add_key>() returns the serial number of the key it created or "
223 "updated. On error, the value -1 will be returned and errno will have been "
224 "set to an appropriate error."
228 #: build/C/man2/add_key.2:95 build/C/man2/keyctl.2:103 build/C/man2/request_key.2:100
234 #: build/C/man2/add_key.2:96 build/C/man2/keyctl.2:120 build/C/man2/request_key.2:123
240 #: build/C/man2/add_key.2:99
241 msgid "The keyring doesn't exist."
245 #: build/C/man2/add_key.2:99 build/C/man2/keyctl.2:111 build/C/man2/request_key.2:111
247 msgid "B<EKEYEXPIRED>"
251 #: build/C/man2/add_key.2:102
252 msgid "The keyring has expired."
256 #: build/C/man2/add_key.2:102 build/C/man2/keyctl.2:117 build/C/man2/request_key.2:117
258 msgid "B<EKEYREVOKED>"
262 #: build/C/man2/add_key.2:105
263 msgid "The keyring has been revoked."
267 #: build/C/man2/add_key.2:105
273 #: build/C/man2/add_key.2:108
274 msgid "The payload data was invalid."
278 #: build/C/man2/add_key.2:108 build/C/man2/request_key.2:120
284 #: build/C/man2/add_key.2:111 build/C/man2/request_key.2:123
285 msgid "Insufficient memory to create a key."
289 #: build/C/man2/add_key.2:111 build/C/man2/keyctl.2:107 build/C/man2/request_key.2:107
295 #: build/C/man2/add_key.2:115 build/C/man2/request_key.2:111
297 "The key quota for this user would be exceeded by creating this key or "
298 "linking it to the keyring."
302 #: build/C/man2/add_key.2:115 build/C/man2/keyctl.2:104 build/C/man2/request_key.2:101
308 #: build/C/man2/add_key.2:118 build/C/man2/request_key.2:104
309 msgid "The keyring wasn't available for modification by the user."
313 #: build/C/man2/add_key.2:118 build/C/man2/keyctl.2:123 build/C/man2/request_key.2:126
319 #: build/C/man2/add_key.2:126 build/C/man2/keyctl.2:131 build/C/man2/request_key.2:134
321 "Although this is a Linux system call, it is not present in I<libc> but can "
322 "be found rather in I<libkeyutils>. When linking, B<-lkeyutils> should be "
323 "specified to the linker."
327 #: build/C/man2/add_key.2:126 build/C/man2/keyctl.2:131 build/C/man2/request_key.2:134
333 #: build/C/man2/add_key.2:130
334 msgid "B<keyctl>(1), B<keyctl>(2), B<request_key>(2)"
338 #: build/C/man2/add_key.2:130 build/C/man2/keyctl.2:160 build/C/man2/request_key.2:139
344 #: build/C/man2/add_key.2:138 build/C/man2/keyctl.2:168 build/C/man2/request_key.2:147
346 "This page is part of release 3.78 of the Linux I<man-pages> project. A "
347 "description of the project, information about reporting bugs, and the latest "
348 "version of this page, can be found at "
349 "\\%http://www.kernel.org/doc/man-pages/."
353 #: build/C/man2/keyctl.2:27
359 #: build/C/man2/keyctl.2:27
365 #: build/C/man2/keyctl.2:30
366 msgid "keyctl - manipulate the kernel's key management facility"
370 #: build/C/man2/keyctl.2:35
372 msgid "B<long keyctl(int >I<cmd>B<, ...);>\n"
376 #: build/C/man2/keyctl.2:39
377 msgid "B<keyctl>() has a number of functions available:"
381 #: build/C/man2/keyctl.2:39
383 msgid "B<KEYCTL_GET_KEYRING_ID>"
387 #: build/C/man2/keyctl.2:42
388 msgid "Ask for a keyring's ID."
392 #: build/C/man2/keyctl.2:42
394 msgid "B<KEYCTL_JOIN_SESSION_KEYRING>"
398 #: build/C/man2/keyctl.2:45
399 msgid "Join or start named session keyring."
403 #: build/C/man2/keyctl.2:45
405 msgid "B<KEYCTL_UPDATE>"
409 #: build/C/man2/keyctl.2:48
410 msgid "Update a key."
414 #: build/C/man2/keyctl.2:48
416 msgid "B<KEYCTL_REVOKE>"
420 #: build/C/man2/keyctl.2:51
421 msgid "Revoke a key."
425 #: build/C/man2/keyctl.2:51
427 msgid "B<KEYCTL_CHOWN>"
431 #: build/C/man2/keyctl.2:54
432 msgid "Set ownership of a key."
436 #: build/C/man2/keyctl.2:54
438 msgid "B<KEYCTL_SETPERM>"
442 #: build/C/man2/keyctl.2:57
443 msgid "Set perms on a key."
447 #: build/C/man2/keyctl.2:57
449 msgid "B<KEYCTL_DESCRIBE>"
453 #: build/C/man2/keyctl.2:60
454 msgid "Describe a key."
458 #: build/C/man2/keyctl.2:60
460 msgid "B<KEYCTL_CLEAR>"
464 #: build/C/man2/keyctl.2:63
465 msgid "Clear contents of a keyring."
469 #: build/C/man2/keyctl.2:63
471 msgid "B<KEYCTL_LINK>"
475 #: build/C/man2/keyctl.2:66
476 msgid "Link a key into a keyring."
480 #: build/C/man2/keyctl.2:66
482 msgid "B<KEYCTL_UNLINK>"
486 #: build/C/man2/keyctl.2:69
487 msgid "Unlink a key from a keyring."
491 #: build/C/man2/keyctl.2:69
493 msgid "B<KEYCTL_SEARCH>"
497 #: build/C/man2/keyctl.2:72
498 msgid "Search for a key in a keyring."
502 #: build/C/man2/keyctl.2:72
504 msgid "B<KEYCTL_READ>"
508 #: build/C/man2/keyctl.2:75
509 msgid "Read a key or keyring's contents."
513 #: build/C/man2/keyctl.2:75
515 msgid "B<KEYCTL_INSTANTIATE>"
519 #: build/C/man2/keyctl.2:78
520 msgid "Instantiate a partially constructed key."
524 #: build/C/man2/keyctl.2:78
526 msgid "B<KEYCTL_NEGATE>"
530 #: build/C/man2/keyctl.2:81
531 msgid "Negate a partially constructed key."
535 #: build/C/man2/keyctl.2:81
537 msgid "B<KEYCTL_SET_REQKEY_KEYRING>"
541 #: build/C/man2/keyctl.2:84
542 msgid "Set default request-key keyring."
546 #: build/C/man2/keyctl.2:84
548 msgid "B<KEYCTL_SET_TIMEOUT>"
552 #: build/C/man2/keyctl.2:87
553 msgid "Set timeout on a key."
557 #: build/C/man2/keyctl.2:87
559 msgid "B<KEYCTL_ASSUME_AUTHORITY>"
563 #: build/C/man2/keyctl.2:90
564 msgid "Assume authority to instantiate key."
568 #: build/C/man2/keyctl.2:97
570 "These are wrapped by B<libkeyutils> into individual functions to permit "
571 "compiler the compiler to check types. See the B<See Also> section at the "
576 #: build/C/man2/keyctl.2:103
578 "On success B<keyctl>() returns the serial number of the key it found. On "
579 "error, the value -1 will be returned and errno will have been set to an "
584 #: build/C/man2/keyctl.2:107
585 msgid "A key operation wasn't permitted."
589 #: build/C/man2/keyctl.2:111
591 "The key quota for the caller's user would be exceeded by creating a key or "
592 "linking it to the keyring."
596 #: build/C/man2/keyctl.2:114
597 msgid "An expired key was found or specified."
601 #: build/C/man2/keyctl.2:114 build/C/man2/request_key.2:114
603 msgid "B<EKEYREJECTED>"
607 #: build/C/man2/keyctl.2:117
608 msgid "A rejected key was found or specified."
612 #: build/C/man2/keyctl.2:120
613 msgid "A revoked key was found or specified."
617 #: build/C/man2/keyctl.2:123
618 msgid "No matching key was found or an invalid key was specified."
622 #: build/C/man2/keyctl.2:157
624 "B<keyctl>(1), B<add_key>(2), B<request_key>(2), B<keyctl_set_timeout>(3), "
625 "B<keyctl_chown>(3), B<keyctl_clear>(3), B<keyctl_describe>(3), "
626 "B<keyctl_describe_alloc>(3), B<keyctl_get_keyring_ID>(3), "
627 "B<keyctl_instantiate>(3), B<keyctl_join_session_keyring>(3), "
628 "B<keyctl_link>(3), B<keyctl_negate>(3), B<keyctl_revoke>(3), "
629 "B<keyctl_search>(3), B<keyctl_setperm>(3), B<keyctl_set_reqkey_keyring>(3), "
630 "B<keyctl_set_timeout>(3), B<keyctl_read>(3), B<keyctl_read_alloc>(3), "
631 "B<keyctl_unlink>(3), B<keyctl_update>(3), B<request-key>(8)"
635 #: build/C/man2/keyctl.2:160
636 msgid "The kernel source file I<Documentation/security/keys.txt>."
640 #: build/C/man2/request_key.2:11
646 #: build/C/man2/request_key.2:14
647 msgid "request_key - request a key from the kernel's key management facility"
651 #: build/C/man2/request_key.2:21
654 "B<key_serial_t request_key(const char *>I<type>B<, const char "
655 "*>I<description>B<,>\n"
656 "B< const char *>I<callout_info>B<,>\n"
657 "B< key_serial_t >I<keyring>B<);>\n"
661 #: build/C/man2/request_key.2:31
663 "B<request_key>() asks the kernel to find a key of the given I<type> that "
664 "matches the specified I<description> and, if successful, to attach it to the "
665 "nominated I<keyring> and to return its serial number."
669 #: build/C/man2/request_key.2:36
671 "B<request_key>() first recursively searches all the keyrings attached to "
672 "the calling process in the order thread-specific keyring, process-specific "
673 "keyring and then session keyring for a matching key."
677 #: build/C/man2/request_key.2:44
679 "If B<request_key>() is called from a program invoked by B<request_key>() "
680 "on behalf of some other process to generate a key, then the keyrings of that "
681 "other process will be searched next, using that other process's UID, GID, "
682 "groups, and security context to control access."
686 #: build/C/man2/request_key.2:52
688 "The keys in each keyring searched are checked for a match before any child "
689 "keyrings are recursed into. Only keys that are B<searchable> for the caller "
690 "may be found, and only B<searchable> keyrings may be searched."
694 #: build/C/man2/request_key.2:61
696 "If the key is not found, then, if I<callout_info> is set, this function will "
697 "attempt to look further afield. In such a case, the I<callout_info> is "
698 "passed to a user-space service such as B</sbin/request-key> to generate the "
703 #: build/C/man2/request_key.2:69
705 "If that is unsuccessful also, then an error will be returned, and a "
706 "temporary negative key will be installed in the nominated I<keyring>. This "
707 "will expire after a few seconds, but will cause subsequent calls to "
708 "B<request_key>() to fail until it does."
712 #: build/C/man2/request_key.2:74
714 "The I<keyring> serial number may be that of a valid keyring to which the "
715 "caller has write permission, or it may be a special keyring ID:"
719 #: build/C/man2/request_key.2:94
721 "If a key is created, no matter whether it's a valid key or a negative key, "
722 "it will displace any other key of the same type and description from the "
723 "destination I<keyring>."
727 #: build/C/man2/request_key.2:100
729 "On success B<request_key>() returns the serial number of the key it found. "
730 "On error, the value -1 will be returned and errno will have been set to an "
735 #: build/C/man2/request_key.2:104
741 #: build/C/man2/request_key.2:107
742 msgid "The request was interrupted by a signal."
746 #: build/C/man2/request_key.2:114
747 msgid "An expired key was found, but no replacement could be obtained."
751 #: build/C/man2/request_key.2:117
752 msgid "The attempt to generate a new key was rejected."
756 #: build/C/man2/request_key.2:120
757 msgid "A revoked key was found, but no replacement could be obtained."
761 #: build/C/man2/request_key.2:126
762 msgid "No matching key was found."
766 #: build/C/man2/request_key.2:139
767 msgid "B<keyctl>(1), B<add_key>(2), B<keyctl>(2), B<request-key>(8)"