Using the Master Key Process (CSNBMKP) verb
/usr/lib64/libcsulccamk.so contains the Master Key Process (CSNBMKP) verb.
Any use of the libcsulccamk.so library is restricted because the library is
installed so that only the root user (user ID of 0) and members of the group
cca_admin have read access. The cca_admin group is added by the
CCA RPM installation procedure. This
is done to limit the ability of an untrusted user to copy the library with the purpose of
reverse-engineering the master-key access methods inside it.
Furthermore, use of some specific access methods through the Master Key Process (CSNBMKP) verb are restricted to
a corresponding Linux™ group membership of the
user trying to make that access. Table 1 contains a list of
the groups and their functions.
Users without the required group membership are denied use. For more information, see Master key load (Step 8).