Repository files (latest commit first)

Filename	Latest commit message	Latest commit date
Mimi Zohar d3600bcf9d KEYS: prevent keys from being removed from specified keyrings ... Userspace should not be allowed to remove keys from certain keyrings (eg. blacklist), though the keys themselves can expire. This patch defines a new key flag named KEY_FLAG_KEEP to prevent userspace from being able to unlink, revoke, invalidate or timed out a key on a keyring. When this flag is set on the keyring, all keys subsequently added are flagged. In addition, when this flag is set, the keyring itself can not be cleared. Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com> Cc: David Howells <dhowells@redhat.com>		2015-12-15 10:01:43 -05:00
..
encrypted-keys	KEYS: Merge the type-specific data with the payload data	2015-10-21 15:18:36 +01:00
big_key.c	KEYS: Merge the type-specific data with the payload data	2015-10-21 15:18:36 +01:00
compat.c	switch keyctl_instantiate_key_common() to iov_iter	2015-04-11 22:27:12 -04:00
gc.c	KEYS: Fix crash when attempt to garbage collect an uninstantiated keyring	2015-10-15 17:21:37 +01:00
internal.h	switch keyctl_instantiate_key_common() to iov_iter	2015-04-11 22:27:12 -04:00
Kconfig	KEYS: Make /proc/keys unconditional if CONFIG_KEYS=y	2015-01-22 22:34:32 +00:00
key.c	KEYS: prevent keys from being removed from specified keyrings	2015-12-15 10:01:43 -05:00
keyctl.c	KEYS: prevent keys from being removed from specified keyrings	2015-12-15 10:01:43 -05:00
keyring.c	KEYS: Merge the type-specific data with the payload data	2015-10-21 15:18:36 +01:00
Makefile	KEYS: Add per-user_namespace registers for persistent per-UID kerberos caches	2013-09-24 10:35:19 +01:00
permission.c	KEYS: Move the flags representing required permission to linux/key.h	2014-03-14 17:44:49 +00:00
persistent.c	KEYS: Move the flags representing required permission to linux/key.h	2014-03-14 17:44:49 +00:00
proc.c	KEYS: Make /proc/keys unconditional if CONFIG_KEYS=y	2015-01-22 22:34:32 +00:00
process_keys.c	KEYS: Merge the type-specific data with the payload data	2015-10-21 15:18:36 +01:00
request_key.c	Merge branch 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security	2015-11-05 15:32:38 -08:00
request_key_auth.c	KEYS: Merge the type-specific data with the payload data	2015-10-21 15:18:36 +01:00
sysctl.c	security: Convert use of typedef ctl_table to struct ctl_table	2014-04-15 13:39:58 +10:00
trusted.c	KEYS: Merge the type-specific data with the payload data	2015-10-21 15:18:36 +01:00
trusted.h	keys, trusted: move struct trusted_key_options to trusted-type.h	2015-10-19 01:01:21 +02:00
user_defined.c	KEYS: Merge the type-specific data with the payload data	2015-10-21 15:18:36 +01:00