summaryrefslogtreecommitdiff
path: root/man
diff options
context:
space:
mode:
authorDavid Howells <dhowells@redhat.com>2019-09-03 11:04:42 +0100
committerDavid Howells <dhowells@redhat.com>2020-07-06 18:00:28 +0100
commit5ac409b01cc4fcb69d903408da90df2d34d4f32a (patch)
tree274a8d817a2b968c816113594638f77886d9beab /man
parent9419ac428efe8385cb2c19680d6b90c90e5335d1 (diff)
downloadkeyutils-5ac409b01cc4fcb69d903408da90df2d34d4f32a.tar.gz
Add the ability to supply filters to watches set with keyctl
Add the ability to supply filters to watches set with "keyctl watch" and "keyctl watch_session". Signed-off-by: David Howells <dhowells@redhat.com>
Diffstat (limited to 'man')
-rw-r--r--man/keyctl.127
1 files changed, 22 insertions, 5 deletions
diff --git a/man/keyctl.1 b/man/keyctl.1
index f18f92d..2343762 100644
--- a/man/keyctl.1
+++ b/man/keyctl.1
@@ -115,13 +115,13 @@ keyctl \- key management facility control
.br
\fBkeyctl\fR pkey_decrypt <key> <pass> <datafile> <sigfile> [k=v]*
.br
-\fBkeyctl\fR watch <key>
+\fBkeyctl\fR watch [\-f<filters>] <key>
.br
\fBkeyctl\fR watch_add <fd> <key>
.br
\fBkeyctl\fR watch_rm <fd> <key>
.br
-\fBkeyctl\fR watch_session [-n <name>] \\
+\fBkeyctl\fR watch_session [\-f <filters>] [-n <name>] \\
<notifylog> <gclog> <fd> <prog> [<arg1> <arg2> ...]
.SH DESCRIPTION
This program is used to control the key management facility in various ways
@@ -954,9 +954,9 @@ keyctl pkey_verify $k 0 foo.hash foo.sig enc=pkcs1 hash=sha256
See asymmetric-key(7) for more information.
.SS Change notifications
-\fBkeyctl\fR watch <key>
+\fBkeyctl\fR watch [\-f<filters>] <key>
.br
-\fBkeyctl\fR watch_session [-n <name>] \\
+\fBkeyctl\fR watch_session [\-f <filters>] [-n <name>] \\
<notifylog> <gclog> <fd> <prog> [<arg1> <arg2> ...]
\fBkeyctl\fR watch_add <fd> <key>
.br
@@ -966,7 +966,24 @@ See asymmetric-key(7) for more information.
The
.B watch
command watches a single key, printing notifications to stdout until the key
-is destroyed.
+is destroyed. Filters can be employed to cut down the events that will be
+delivered. The
+.I filter
+string is a series of letters, each one of which enables a particular event
+subtype:
+.PP
+.RS
+.nf
+.BR i " - The key has been instantiated"
+.BR p " - The key has been updated"
+.BR l " - A link has been added to a keyring"
+.BR n " - A link has been removed from a keyring"
+.BR c " - A keyring has been cleared"
+.BR r " - A key has been revoked"
+.BR v " - A key has been invalidated"
+.BR s " - A key has had its attributes changed"
+.fi
+.RE
.PP
The output of the command looks like:
.PP