diff options
| author | David Howells <dhowells@redhat.com> | 2013-09-24 10:35:18 +0100 |
|---|---|---|
| committer | David Howells <dhowells@redhat.com> | 2013-09-24 10:35:18 +0100 |
| commit | b2a4df200d570b2c33a57e1ebfa5896e4bc81b69 (patch) | |
| tree | 7fa48ae3c5ecff90d6d1f662fd91af5ddf74d56d /security/keys/Kconfig | |
| parent | 3cb989501c2688cacbb7dc4b0d353faf838f53a1 (diff) | |
| download | op-kernel-dev-b2a4df200d570b2c33a57e1ebfa5896e4bc81b69.zip op-kernel-dev-b2a4df200d570b2c33a57e1ebfa5896e4bc81b69.tar.gz | |
KEYS: Expand the capacity of a keyring
Expand the capacity of a keyring to be able to hold a lot more keys by using
the previously added associative array implementation. Currently the maximum
capacity is:
(PAGE_SIZE - sizeof(header)) / sizeof(struct key *)
which, on a 64-bit system, is a little more 500. However, since this is being
used for the NFS uid mapper, we need more than that. The new implementation
gives us effectively unlimited capacity.
With some alterations, the keyutils testsuite runs successfully to completion
after this patch is applied. The alterations are because (a) keyrings that
are simply added to no longer appear ordered and (b) some of the errors have
changed a bit.
Signed-off-by: David Howells <dhowells@redhat.com>
Diffstat (limited to 'security/keys/Kconfig')
| -rw-r--r-- | security/keys/Kconfig | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/security/keys/Kconfig b/security/keys/Kconfig index a90d6d30..15e0dfe 100644 --- a/security/keys/Kconfig +++ b/security/keys/Kconfig @@ -4,6 +4,7 @@ config KEYS bool "Enable access key retention support" + select ASSOCIATIVE_ARRAY help This option provides support for retaining authentication tokens and access keys in the kernel. |
