David Howells <dhowells@xxxxxxxxxx> wrote: > > - Looking at commit [4], it seems that the new "notifier" interface/api > > forces userspace applications to link against -lkeyutils [5]. > > No. The keyctl(2) syscall is implemented in -lkeyutils library, and not in > -lc. That's all. If you want to call KEYCTL_NOTIFY to watch a key or > keyring, you need it; not otherwise. Sorry, KEYCTL_WATCH_KEY, not KEYCTL_NOTIFY. I've changed my mind about the naming of things a couple of times and should probably harmonise them. David