Re: [blfs-book] [blfs] 01/06: keyutils: document that the test suite fails while adding user keys.

On 2/19/26 4:24 AM, Xi Ruoyao ([email protected] via blfs-dev Mailing 
List) wrote:
> On Wed, 2026-02-18 at 18:47 +0000, Git Owner wrote:
>> This is an automated email from the git hooks/post-receive script.
>>
>> git pushed a commit to branch trunk
>> in repository blfs.
>>
>> commit 8db3f802a61c3550ea35ab2b9e11fa3a1c3d8cdf
>> Author: Douglas R. Reno <[email protected]>
>> AuthorDate: Wed Feb 18 11:27:52 2026 -0600
>>
>>      keyutils: document that the test suite fails while adding user keys.
>> ---
>>   general/genlib/keyutils.xml | 6 +++++-
>>   1 file changed, 5 insertions(+), 1 deletion(-)
>>
>> diff --git a/general/genlib/keyutils.xml b/general/genlib/keyutils.xml
>> index 3d56f647c4..2e60e173f9 100644
>> --- a/general/genlib/keyutils.xml
>> +++ b/general/genlib/keyutils.xml
>> @@ -119,7 +119,11 @@
>>       <para>
>>         If <xref linkend='lsb-tools'/> is not installed, the test suite will
>>         output some lines complaining the <command>lsb_release</command>
>> -      command not available but it won't affect the test result.
>> +      command not available but it won't affect the test result. The tests
>> +      are currently known to fail once it attempts to add user-generated keys
>> +      to the keyring.
>> +      <!-- I did verify that this occurs on other distros as well, and it seems
>> +      to be known at Gentoo.-->
> I cannot reproduce it at all.  This may mean the kernel configuration
> list is not sufficient.  And maybe a stupid question: are you running it
> as root as the book says?
>
Hey Xi,

Yes I have been running the tests as root. They get relatively far, but 
will crash at:

renodr [ /sources/keyutils-1.6.3/keyutils-1.6.3 ]$ sudo make -k test

[...]

### RUNNING TEST features/builtin_trusted
Running with session keyring RHTS/keyctl/2841766
Joined session keyring: 695585823
keyutils version: keyctl from keyutils-1.6.3 (Built 2026-02-17)
=== 
/sources/keyutils-1.6.3/keyutils-1.6.3/tests/features/builtin_trusted/test.out 
===
+++ FIND BUILTIN TRUSTED KEYRINGS
./runtest.sh: line 27: fail: command not found
+++ TRY ADDING USER KEYS
FAILED
+++ TRY ADDING ASYMMETRIC KEYS
FAILED
make[1]: *** [Makefile:41: run] Error 1
make[1]: Leaving directory '/sources/keyutils-1.6.3/keyutils-1.6.3/tests'
make: *** [Makefile:250: test] Error 2


Looking at tests/features/builtin_trusted/test.out, I see the following 
commands:

+++ TRY ADDING USER KEYS
keyctl add user a a 505048767
add_key: Permission denied
keyctl add user a a 472951533
add_key: Operation not supported
keyctl add user a a 180763932
add_key: Operation not supported
=== FAILED ===

I've tried the first command there manually and was able to verify that 
the previous commands in that file give the proper output expected.

After this, I ran strace on it:

add_key("user", "a", "a", 1, 505048767) = -1 EACCES (Permission denied)


I thought the same regarding kernel configuration as well. I have set 
the CONFIG_SYSTEM_BLACKLIST_AUTH_UPDATE=y option as that wasn't set in 
the book's configuration, but that didn't seem to help. I also set 
CONFIG_KEYS_REQUEST_CACHE=y but that didn't seem to help either. I've 
tried Gentoo's distribution kernel too on another system as well as the 
default Linode kernel from on one of the LFS servers, and that didn't 
help either...

Can you email me your kernel configuration relating to keys and crypto?

- Doug

-- 
http://lists.linuxfromscratch.org/sympa/info/blfs-dev
Unsubscribe: See the above information page