Issue in man page keyrings.7

Issue in man page keyrings.7

[Helge Kreutzmann]

Without further ado, the following was found:

Issue:    pinned → anchored?

"Process credentials themselves reference keyrings with specific semantics.  "
"These keyrings are pinned as long as the set of credentials exists, which is "
"usually as long as the process exists."

Re: Issue in man page keyrings.7

[Alejandro Colomar]

[-- Attachment #1.1: Type: text/plain, Size: 2992 bytes --]

Hi Helge,

On 12/4/22 10:07, Helge Kreutzmann wrote:
> Without further ado, the following was found:
> 
> Issue:    pinned → anchored?
> 
> "Process credentials themselves reference keyrings with specific semantics."
> "These keyrings are pinned as long as the set of credentials exists, which is"
> "usually as long as the process exists."

I'm not sure.  I see uses of both terms, and don't know the interfaces enough to 
be able to tell which term is more appropriate here.  Please CC any developers 
of those interfaces and see what they think about it.

Cheers,

Alex

---

$ grep -rn pin | grep key
man2/keyctl.2:1394:everything it pins can then be garbage collected.
man2/ioctl_getfsmap.2:57:key for which the application would like physical mapping
man2/ioctl_getfsmap.2:59:A reverse mapping key consists of the tuple (device, 
block, owner, offset).
man5/repertoiremap.5:27:The mapping section starts with the keyword
man7/user-keyring.7:26:The keyring remains pinned in existence so long as there 
are processes
man7/user-keyring.7:28:(The keyring can also be pinned indefinitely by linking it
man7/user-keyring.7:60:the last process pinning it exits.
man7/keyrings.7:232:These keyrings are pinned as long as the set of credentials 
exists,
man7/keyrings.7:614:structures that are pinning the key
man7/keyrings.7:856:NFS - User ID mapping
man7/keyrings.7:857:The NFS filesystem uses keys to store mappings of
man7/persistent-keyring.7:46:everything it pins can then be garbage collected.
man7/user-session-keyring.7:27:The keyring remains pinned in existence so long 
as there are processes
man7/user-session-keyring.7:29:(The keyring can also be pinned indefinitely by 
linking it
man7/user-session-keyring.7:63:when the last process pinning it exits.


$ grep -rn anchor | grep key
man2/add_key.2:55:.\" is consequently unlinked, then keys that it was anchoring
man7/user-keyring.7:10:The user keyring is a keyring used to anchor keys on 
behalf of a user.
man7/keyrings.7:218:it must be anchored to keep its reference count elevated
man7/keyrings.7:221:Keyrings are used to anchor other keys:
man7/keyrings.7:224:are also subject to the same anchoring requirement to prevent
man7/keyrings.7:227:The kernel makes available a number of anchor keyrings.
man7/keyrings.7:298:There are special keyrings owned by the kernel that can 
anchor keys
man7/persistent-keyring.7:10:The persistent keyring is a keyring used to anchor 
keys on behalf of a user.
man7/thread-keyring.7:10:The thread keyring is a keyring used to anchor keys on 
behalf of a process.
man7/process-keyring.7:10:The process keyring is a keyring used to anchor keys 
on behalf of a process.
man7/session-keyring.7:10:The session keyring is a keyring used to anchor keys 
on behalf of a process.
man7/user-session-keyring.7:10:The user session keyring is a keyring used to 
anchor keys on behalf of a user.


-- 
<http://www.alejandro-colomar.es/>

[-- Attachment #2: OpenPGP digital signature --]
[-- Type: application/pgp-signature, Size: 833 bytes --]

Re: Issue in man page keyrings.7

[Helge Kreutzmann]

[-- Attachment #1: Type: text/plain, Size: 1246 bytes --]

Hello Alejandro,
On Sun, Dec 04, 2022 at 12:47:52PM +0100, Alejandro Colomar wrote:
> On 12/4/22 10:07, Helge Kreutzmann wrote:
> > Without further ado, the following was found:
> > 
> > Issue:    pinned → anchored?
> > 
> > "Process credentials themselves reference keyrings with specific semantics."
> > "These keyrings are pinned as long as the set of credentials exists, which is"
> > "usually as long as the process exists."
> 
> I'm not sure.  I see uses of both terms, and don't know the interfaces
> enough to be able to tell which term is more appropriate here.  Please CC
> any developers of those interfaces and see what they think about it.

Well, you have a subtitle called:

Anchoring keys

(Just a few lines above this paragraph). Thus I wondered if this is a
different concept than pinning.

I mark it WONTFIX for now in our sources, so it does not get reported
again. 

Thanks!

Greetings

         Helge

-- 
      Dr. Helge Kreutzmann                     debian@helgefjell.de
           Dipl.-Phys.                   http://www.helgefjell.de/debian.php
        64bit GNU powered                     gpg signed mail preferred
           Help keep free software "libre": http://www.ffii.de/

[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 833 bytes --]

Re: Issue in man page keyrings.7

[Alejandro Colomar]

[-- Attachment #1.1: Type: text/plain, Size: 1228 bytes --]

Hi Helge,

On 12/4/22 14:57, Helge Kreutzmann wrote:
> Hello Alejandro,
> On Sun, Dec 04, 2022 at 12:47:52PM +0100, Alejandro Colomar wrote:
>> On 12/4/22 10:07, Helge Kreutzmann wrote:
>>> Without further ado, the following was found:
>>>
>>> Issue:    pinned → anchored?
>>>
>>> "Process credentials themselves reference keyrings with specific semantics."
>>> "These keyrings are pinned as long as the set of credentials exists, which is"
>>> "usually as long as the process exists."
>>
>> I'm not sure.  I see uses of both terms, and don't know the interfaces
>> enough to be able to tell which term is more appropriate here.  Please CC
>> any developers of those interfaces and see what they think about it.
> 
> Well, you have a subtitle called:
> 
> Anchoring keys
> 
> (Just a few lines above this paragraph). Thus I wondered if this is a
> different concept than pinning.
> 
> I mark it WONTFIX for now in our sources, so it does not get reported
> again.

No, please, report it again.  It's just that I don't know at the moment.  I'd 
like to confirm this report.

Cheers,

Alex

> 
> Thanks!
> 
> Greetings
> 
>           Helge
> 

-- 
<http://www.alejandro-colomar.es/>

[-- Attachment #2: OpenPGP digital signature --]
[-- Type: application/pgp-signature, Size: 833 bytes --]

Re: Issue in man page keyrings.7

[Helge Kreutzmann]

[-- Attachment #1: Type: text/plain, Size: 1710 bytes --]

Hello Alejandro,
On Sun, Dec 04, 2022 at 10:14:29PM +0100, Alejandro Colomar wrote:
> On 12/4/22 14:57, Helge Kreutzmann wrote:
> > Hello Alejandro,
> > On Sun, Dec 04, 2022 at 12:47:52PM +0100, Alejandro Colomar wrote:
> > > On 12/4/22 10:07, Helge Kreutzmann wrote:
> > > > Without further ado, the following was found:
> > > > 
> > > > Issue:    pinned → anchored?
> > > > 
> > > > "Process credentials themselves reference keyrings with specific semantics."
> > > > "These keyrings are pinned as long as the set of credentials exists, which is"
> > > > "usually as long as the process exists."
> > > 
> > > I'm not sure.  I see uses of both terms, and don't know the interfaces
> > > enough to be able to tell which term is more appropriate here.  Please CC
> > > any developers of those interfaces and see what they think about it.
> > 
> > Well, you have a subtitle called:
> > 
> > Anchoring keys
> > 
> > (Just a few lines above this paragraph). Thus I wondered if this is a
> > different concept than pinning.
> > 
> > I mark it WONTFIX for now in our sources, so it does not get reported
> > again.
> 
> No, please, report it again.  It's just that I don't know at the moment.
> I'd like to confirm this report.

No problem, I switched it back. 

So if it remains unchanged in 6.02 it might get reported again.

Thanks for handling this!

Greetings

          Helge

-- 
      Dr. Helge Kreutzmann                     debian@helgefjell.de
           Dipl.-Phys.                   http://www.helgefjell.de/debian.php
        64bit GNU powered                     gpg signed mail preferred
           Help keep free software "libre": http://www.ffii.de/

[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 833 bytes --]

Re: Issue in man page keyrings.7

[Alejandro Colomar]

[-- Attachment #1.1: Type: text/plain, Size: 472 bytes --]



On 12/4/22 10:07, Helge Kreutzmann wrote:
> Without further ado, the following was found:
> 
> Issue:    the thread → the
> 
> "The process keyrings are searched in the following order: the thread"
> "B<thread-keyring>(7)  if it exists, the B<process-keyring>(7)  if it exists,"
> "and then either the B<session-keyring>(7)  if it exists or the B<user-"
> "session-keyring>(7)  if that exists."

Fixed.  Thanks.

-- 
<http://www.alejandro-colomar.es/>

[-- Attachment #2: OpenPGP digital signature --]
[-- Type: application/pgp-signature, Size: 833 bytes --]

Issue in man page keyrings.7

[Helge Kreutzmann]

Without further ado, the following was found:

Issue:    the thread → the

"The process keyrings are searched in the following order: the thread "
"B<thread-keyring>(7)  if it exists, the B<process-keyring>(7)  if it exists, "
"and then either the B<session-keyring>(7)  if it exists or the B<user-"
"session-keyring>(7)  if that exists."

Issue in man page keyrings.7

[Helge Kreutzmann]

Without further ado, the following was found:

Issue:    Possession → POSESSION

"Much as files do, each key has an owning user ID, an owning group ID, and a "
"security label.  Each key also has a set of permissions, though there are "
"more than for a normal UNIX file, and there is an additional category"
"\\(empossessor\\(embeyond the usual user, group, and other (see "
"I<Possession>, below)."