%general-entities; ]> keyutils-&keyutils-version; keyutils Introduction to keyutils Keyutils is a set of utilities for managing the key retention facility in the kernel, which can be used by filesystems, block devices and more to gain and retain the authorization and encryption keys required to perform secure operations. &lfs121_checked; Package Information Download (HTTP): Download (FTP): Download MD5 sum: &keyutils-md5sum; Download size: &keyutils-size; Estimated disk space required: &keyutils-buildsize; Estimated build time: &keyutils-time; Keyutils Dependencies Optional (referred by the test suite) Kernel Configuration If running the test suite, some tests needs the following kernel features enabled: keyutils (testing) Installation of keyutils Install keyutils by running the following commands: make Now, as the root user: make NO_ARLIB=1 LIBDIR=/usr/lib BINDIR=/usr/bin SBINDIR=/usr/sbin install The test suite can only run after installing this package. To test the results, issue, as the root user: make -k test If is not installed, the test suite will output some lines complaining the lsb_release command not available but it won't affect the test result. Command Explanations NO_ARLIB=1: This make flag disables installing the static library. Configuring keyutils Config Files /etc/request-key.conf and /etc/request-key.d/* /etc/request-key.conf /etc/request-key.d/* Contents Installed Programs Installed Library Installed Directory keyctl, key.dns_resolver, and request-key libkeyutils.so /etc/keyutils, /etc/request-key.d, and /usr/share/keyutils Short Descriptions keyctl controls the key management facility with a variety of subcommands keyctl key.dns_resolver is invoked by request-key on behalf of the kernel when kernel services (such as NFS, CIFS and AFS) need to perform a hostname lookup and the kernel does not have the key cached. It is not ordinarily intended to be called directly key.dns_resolver request-key is invoked by the kernel when the kernel is asked for a key that it doesn't have immediately available. The kernel creates a temporary key and then calls out to this program to instantiate it. It is not intended to be called directly request-key libkeyutils.so contains the keyutils library API instantiation libkeyutils.so