[Linux-ima-devel] execute 'su -c "keyctl pipe 820080884"' show keyctl_read_alloc: Permission denied

[er_tou <er...@16...>]

Hello,everyone,I encounter this problem on centos 7(kernel 3.10.0-514.el7.x86_64). when execute “$ su -c 'keyctl pipe `keyctl search @u user kmk-user` > /etc/keys/kmk-user.blob'” command, show "keyctl_read_alloc: Permission denied"[ost ima_key_sign]$ su -c 'cat /proc/keys 'Password: 
01e429d6 I--Q---   149 perm 3f030000  1000  1000 keyring   _ses: 1
031b7c53 I--Q---     1 perm 3f010000     0     0 user      kmk-user: 10

Who can help me？  Thanks
======================================================================================
"
$ su -c 'mkdir -p /etc/keys'
# To create and save the kernel master key (user type):
$ su -c 'modprobe trusted encrypted'
$ su -c 'keyctl add user kmk-user "`dd if=/dev/urandom bs=1 count=32 2>/dev/null`" @u'
$ su -c 'keyctl pipe `keyctl search @u user kmk-user` > /etc/keys/kmk-user.blob'


# Create the EVM encrypted key
$ su -c 'keyctl add encrypted evm-key "new user:kmk-user 32" @u'
$ su -c 'keyctl pipe `keyctl search @u encrypted evm-key` >/etc/keys/evm-user.blob'
"
-------------- next part --------------
An HTML attachment was scrubbed...