core: add new per-unit setting KeyringMode= for controlling kernel keyring setup

Usually, it's a good thing that we isolate the kernel session keyring
for the various services and disconnect them from the user keyring.
However, in case of the cryptsetup key caching we actually want that
multiple instances of the cryptsetup service can share the keys in the
root user's user keyring, hence we need to be able to disable this logic
for them.

This adds KeyringMode=inherit|private|shared:

    inherit: don't do any keyring magic (this is the default in systemd --user)
    private: a private keyring as before (default in systemd --system)
    shared: the new setting

This commit is contained in:

Lennart Poettering

2017-09-15 16:53:35 +02:00

parent 4e962627bc

commit b1edf4456e

10 changed files with 144 additions and 8 deletions

									
										src/basic/missing.h
									
		+4
		
												View File
												
				@@ -1128,6 +1128,10 @@ typedef int32_t key_serial_t;

				#define KEYCTL_DESCRIBE 6

				#endif

				#ifndef KEYCTL_LINK

				#define KEYCTL_LINK 8

				#endif

				#ifndef KEYCTL_READ

				#define KEYCTL_READ 11

				#endif