diff --git a/[refs] b/[refs]
index 974adf85a372..22701a729ece 100644
--- a/[refs]
+++ b/[refs]
@@ -1,2 +1,2 @@
 ---
-refs/heads/master: 5c72c343719a8c5dba675cd1b27b63c06bfe23d1
+refs/heads/master: db1d1d57e97700b4131fe80556dc6ef976d534c4
diff --git a/trunk/security/keys/keyring.c b/trunk/security/keys/keyring.c
index c7a0ab1cfda3..4e9fa8be44b8 100644
--- a/trunk/security/keys/keyring.c
+++ b/trunk/security/keys/keyring.c
@@ -526,7 +526,7 @@ key_ref_t __keyring_search_one(key_ref_t keyring_ref,
 			    (!key->type->match ||
 			     key->type->match(key, description)) &&
 			    key_permission(make_key_ref(key, possessed),
-					   perm) < 0 &&
+					   perm) == 0 &&
 			    !test_bit(KEY_FLAG_REVOKED, &key->flags)
 			    )
 				goto found;