security/keys/core.rst

11 kernel service can search for relevant keys.
32 	- A description (for matching a key in a search).
188   *  There's a kernel interface by which services can register types and search
191   *  There's a way for the a search done from the kernel to call back to
223      only recurse into nested keyrings that have search permission set.
470      To attach to a named keyring, the keyring must have search permission for
627      The process must have search permission on the top level keyring, or else
628      error EACCES will result. Only keyrings that the process has search
630      a process has search permission can be matched. If the specified keyring
633      If the search succeeds, the function will attempt to link the found key
637      Error ENOKEY, EKEYREVOKED or EKEYEXPIRED will be returned if the search
766      Once authority is assumed, searches for keys will also search the
833      A process must have search permission on the key for this function to be
1099 filesystem or device file, a search would probably be performed during the open
1144  *  To search for a key, call::
1166  *  To search for a key in a specific domain, call::
1174     specifies that causes search algorithm to only match keys matching that
1179  *  To search for a key, passing auxiliary data to the upcaller, call::
1194  *  To search for a key under RCU conditions, call::
1238  *  If a keyring was found in the search, this can be further searched by::
1325 search a specific keyring, so using keyrings in this way is of limited utility.
1528      This method is optional.  It is called when a key search is about to be
1547       	  description to narrow down the search to a small number of keys.
1551       	  search that's not doing a simple direct match on the key description.
1799 keyrings from the process that caused the search to be issued. These are