]> git.ipfire.org Git - thirdparty/systemd.git/commit
sd-id128: gracefully handle systems where kernel keyring access is blocked
authorLennart Poettering <lennart@poettering.net>
Sun, 2 Mar 2025 06:51:05 +0000 (07:51 +0100)
committerYu Watanabe <watanabe.yu+github@gmail.com>
Mon, 3 Mar 2025 05:30:41 +0000 (14:30 +0900)
commitf2e38b01e052ebd50eaf98763bd9709e880c0a75
tree60307a106fdd249dec6b785b87a0322159c25953
parentc179f039113c2679503abd1914824724b9f21325
sd-id128: gracefully handle systems where kernel keyring access is blocked

In various scenarios we invoke containers with access to the kernel
keyring blocked. Let's make sure we can handle this properly: when the
invocation ID is stored in in the kernel keyring and we try to read it
and get EPERM we should handle it gracefully, like EOPNOTSUPP.
src/libsystemd/sd-id128/sd-id128.c