crypto/linux_keyring: add 'secret_keyring' secret object.
authorAlexey Krasikov <alex-krasikov@yandex-team.ru>
Mon, 25 May 2020 11:19:12 +0000 (14:19 +0300)
committerDaniel P. Berrangé <berrange@redhat.com>
Mon, 15 Jun 2020 10:33:51 +0000 (11:33 +0100)
commit54e7aac0562452e4fcab65ca5001d030eef2de15
treeb348bbbee075fad62aaf161e7d32096610d18d4c
parent4862bd3cd2052f1b48e4d08b1820e70a255c4859
crypto/linux_keyring: add 'secret_keyring' secret object.

Add the ability for the secret object to obtain secret data from the
Linux in-kernel key managment and retention facility, as an extra option
to the existing ones: reading from a file or passing directly as a
string.

The secret is identified by the key serial number. The upper layers
need to instantiate the key and make sure the QEMU process has access
permissions to read it.

Signed-off-by: Alexey Krasikov <alex-krasikov@yandex-team.ru>
 - Fixed up detection logic default behaviour in configure

Signed-off-by: Daniel P. Berrangé <berrange@redhat.com>
configure
crypto/Makefile.objs
crypto/secret_keyring.c [new file with mode: 0644]
include/crypto/secret_keyring.h [new file with mode: 0644]