Method SessionKeyring

pkg/sentry/kernel/task_key.go:26–39

SessionKeyring returns this Task's session keyring. Session keyrings are inherited from the parent when a task is started. If the session keyring is unset, it is implicitly initialized. As such, this function should never return ENOKEY.

()

// If the session keyring is unset, it is implicitly initialized.
// As such, this function should never return ENOKEY.
func (t *Task) SessionKeyring() (*auth.Key, error) {
	t.mu.Lock()
	defer t.mu.Unlock()
	if t.sessionKeyring != nil {
		// Verify that we still have access to this keyring.
		creds := t.Credentials()
		if !creds.HasKeyPermission(t.sessionKeyring, creds.PossessedKeys(t.sessionKeyring, nil, nil), auth.KeySearch) {
			return nil, linuxerr.EACCES
		}
		return t.sessionKeyring, nil
	}
	// If we don't have a session keyring, implicitly create one.
	return t.joinNewSessionKeyringLocked(auth.DefaultSessionKeyringName, auth.DefaultUnnamedSessionKeyringPermissions)
}

// joinNewSessionKeyringLocked creates a new session keyring with the given
// description, and joins it immediately.