dg_getrootkey(2)                  SDK R4.11                 dg_getrootkey(2)


NAME
       dggetrootkey - get root's secret key

SYNOPSIS
       int  dggetrootkey (secretkey)
       char * secretkey;

   where:
       secretkey      The root secret key.

DESCRIPTION
       This call is used to read the root's decrypted secret key from
       battery backed-up RAM.  It is used by the keyserv(1M) process to
       initialize its database.  In this way, the keyserver can get the root
       key without operator intervention, as in the case of a power failure
       in the middle of the night.

ACCESS CONTROL
       The calling process must have appropriate privilege to successfully
       execute this system call.  For systems supporting the DG/UX
       Capability Option, appropriate privilege is defined as having one or
       more specific capabilities enabled in the effective capability set of
       the calling process.  See capdefaults(5) for the default capability
       for this system call.

       On systems without the DG/UX Capability Option, appropriate privilege
       means that the process has an effective UID of root.  See the
       appropriateprivilege(5) man page for more information.

RETURN VALUE
       0      The operation was successful.

       -1     An error occurred.  errno indicates the error.

DIAGNOSTICS
       Errno may be set to one of the following error codes:

       EPERM     The calling process does not have appropriate privilege.

       EFAULT    Some part of the string pointed to by secretkey lies
                 outside the process's writable address space.

SEE ALSO
       keyserv(1M), dgdecryptsessionkey(2), dgencryptsessionkey(2),
       dgsetsecretkey(2), appropriateprivilege(5).
       capdefaults(5).


Licensed material--property of copyright holder(s)