On Wed, May 17, 2006 at 12:35:50PM -0400, Stephen Smalley wrote:
> 
> Quick question:  What is using the kernel keyring support?  OpenAFS?  I
> don't see anything in Linus' tree using it in-kernel at present.  So why
> is it there?  Looks like ecryptfs is using it over in -mm.  If nothing
> in the evaluated configuration is using it, can it just be disabled in
> the evaluated kernel?
> 
> -- 
> Stephen Smalley
> National Security Agency
>

That was Klaus' original recommendation.  However, it seemed not to be an
option when we last discussed it on the list.  In an Oct. 5 post James Morris
wrote, "We're only shipping one kernel, and this feature will be enabled."  I
don't know if Red Hat's position has changed on this issue.  It might make sense
once again to consider turning it off given nothing is really using it yet.  In
fact, I don't see the keyutils rpm in the Core/Extras 5 or rawhide install 
trees,
which is somewhat surprising.  Am I overlooking it?

-- 
George Wilson <[EMAIL PROTECTED]>
IBM Linux Technology Center

--
redhat-lspp mailing list
[email protected]
https://www.redhat.com/mailman/listinfo/redhat-lspp

Reply via email to