|author||David Howells <firstname.lastname@example.org>||2013-09-24 10:35:18 +0100|
|committer||David Howells <email@example.com>||2013-09-24 10:35:18 +0100|
|parent||Add a generic associative array implementation. (diff)|
KEYS: Expand the capacity of a keyring
Expand the capacity of a keyring to be able to hold a lot more keys by using the previously added associative array implementation. Currently the maximum capacity is: (PAGE_SIZE - sizeof(header)) / sizeof(struct key *) which, on a 64-bit system, is a little more 500. However, since this is being used for the NFS uid mapper, we need more than that. The new implementation gives us effectively unlimited capacity. With some alterations, the keyutils testsuite runs successfully to completion after this patch is applied. The alterations are because (a) keyrings that are simply added to no longer appear ordered and (b) some of the errors have changed a bit. Signed-off-by: David Howells <firstname.lastname@example.org>
Diffstat (limited to '')
1 files changed, 1 insertions, 0 deletions
diff --git a/security/keys/Kconfig b/security/keys/Kconfig
index a90d6d300dbd..15e0dfe8c80f 100644
@@ -4,6 +4,7 @@
bool "Enable access key retention support"
+ select ASSOCIATIVE_ARRAY
This option provides support for retaining authentication tokens and
access keys in the kernel.