David Howells
664cceb009
[PATCH] Keys: Add possessor permissions to keys [try #3 ] ...
The attached patch adds extra permission grants to keys for the possessor of a
key in addition to the owner, group and other permissions bits. This makes
SUID binaries easier to support without going as far as labelling keys and key
targets using the LSM facilities.
This patch adds a second "pointer type" to key structures (struct key_ref *)
that can have the bottom bit of the address set to indicate the possession of
a key. This is propagated through searches from the keyring to the discovered
key. It has been made a separate type so that the compiler can spot attempts
to dereference a potentially incorrect pointer.
The "possession" attribute can't be attached to a key structure directly as
it's not an intrinsic property of a key.
Pointers to keys have been replaced with struct key_ref *'s wherever
possession information needs to be passed through.
This does assume that the bottom bit of the pointer will always be zero on
return from kmem_cache_alloc().
The key reference type has been made into a typedef so that at least it can be
located in the sources, even though it's basically a pointer to an undefined
type. I've also renamed the accessor functions to be more useful, and all
reference variables should now end in "_ref".
Signed-Off-By: David Howells <dhowells@redhat.com>
Signed-off-by: Linus Torvalds <torvalds@osdl.org>
2005-09-28 09:10:47 -07:00
[BYTEORDER]: Document alignment and byteorder macros
2005-09-19 19:57:36 -07:00
[MMC] Ensure correct mmc_priv() behaviour
2005-09-08 22:46:00 +01:00
[NETFILTER]: Fix invalid module autoloading by splitting iptable_nat
2005-09-26 15:25:11 -07:00
[NETFILTER] ip6tables: remove duplicate code
2005-09-19 15:34:40 -07:00
[PATCH] nfsd4: move replay_owner
2005-09-13 08:22:31 -07:00
[PATCH] md: add write-intent-bitmap support to raid5
2005-09-09 16:39:12 -07:00
[PATCH] bfs: fix endianness, signedness; add trivial bugfix
2005-09-09 13:57:32 -07:00
[PATCH] include/linux/bio.h: "extern inline" -> "static inline"
2005-09-10 10:06:35 -07:00
[PATCH] spinlock consolidation
2005-09-10 10:06:21 -07:00
[PATCH] include/linux/blkdev.h: "extern inline" -> "static inline"
2005-09-10 10:06:34 -07:00
[PATCH] __user annotations (scsi/ch)
2005-09-10 10:16:27 -07:00
[CONNECTOR]: async connector mode.
2005-09-26 15:06:50 -07:00
[PATCH] crc16: remove w1 specific comments.
2005-09-12 08:48:08 -07:00
[DCCP]: Introduce CCID getsockopt for the CCIDs
2005-09-18 00:19:32 -07:00
[PATCH] driver core: add helper device_is_registered()
2005-09-22 07:58:24 -07:00
[PATCH] dmapool: Fix "nocast type" warnings
2005-09-10 10:06:29 -07:00
[PATCH] x86-64: Make dmi_find_device for !DMI case inline
2005-09-12 10:50:58 -07:00
[PATCH] fbcon: constify font data
2005-09-13 08:22:32 -07:00
[PATCH] files: files struct with RCU
2005-09-09 13:57:55 -07:00
[PATCH] fbcon: constify font data
2005-09-13 08:22:32 -07:00
[PATCH] mm/filemap.c: make two functions static
2005-09-10 10:06:25 -07:00
[PATCH] FUSE: add fsync operation for directories
2005-09-09 14:03:47 -07:00
[PATCH] i2c: kill an unused i2c_adapter struct member
2005-09-17 11:50:02 -07:00
[8021Q]: Add endian annotations.
2005-09-19 15:41:28 -07:00
[IPV6]: Note values allocated for ip6_tables.
2005-09-10 11:32:45 +09:00
[PATCH] files: files struct with RCU
2005-09-09 13:57:55 -07:00
Manual merge with Linus
2005-09-09 20:14:47 -05:00
[PATCH] x86-64: Some cleanup and optimization to the processor data area.
2005-09-12 10:49:58 -07:00
[IPV6]: Bring Type 0 routing header in-line with rfc3542.
2005-09-10 00:15:06 -07:00
[PATCH] spinlock consolidation
2005-09-10 10:06:21 -07:00
[PATCH] include: update jiffies/{m,u}secs conversion functions
2005-09-10 10:06:36 -07:00
[PATCH] joystick-vs-x.org fix
2005-09-17 11:50:02 -07:00
[PATCH] Make BUILD_BUG_ON fail at compile time.
2005-09-13 08:22:28 -07:00
[PATCH] Keys: Add possessor permissions to keys [try #3 ]
2005-09-28 09:10:47 -07:00
[PATCH] Keys: Add possessor permissions to keys [try #3 ]
2005-09-28 09:10:47 -07:00
[PATCH] PATCH: remove function for non-PCI as requested
2005-09-16 02:39:01 -04:00
[PATCH] PCI: Run PCI driver initialization on local node
2005-09-08 14:57:23 -07:00
[PATCH] mm: add a note about partially hardcoded VM_* flags
2005-09-21 10:11:55 -07:00
[PATCH] pcmcia: fix cross-platform issues with pcmcia module aliases
2005-09-26 13:13:58 +02:00
[NETLINK]: Reserve a slot for NETLINK_GENERIC.
2005-09-14 20:52:37 -07:00
Remove "must_check" attributes in PCI-land
2005-09-09 15:43:46 -07:00
[PATCH] yenta: add support for more TI bridges
2005-09-26 13:11:27 +02:00
[PATCH] PCI: restore BAR values after D3hot->D0 for devices that need it
2005-09-08 14:57:24 -07:00
[PATCH] pktcdvd: BUG_ON cleanups
2005-09-13 08:22:31 -07:00
[PATCH] lib/radix-tree: Fix "nocast type" warnings
2005-09-10 10:06:28 -07:00
[PATCH] files: fix rcu initializers
2005-09-09 13:57:54 -07:00
[PATCH] files: rcuref APIs
2005-09-09 13:57:54 -07:00
[PATCH] reboot: comment and factor the main reboot functions
2005-09-22 22:17:33 -07:00
[PATCH] "extern inline" -> "static inline"
2005-09-10 10:06:35 -07:00
[PATCH] set_current_state() commentary
2005-09-13 08:22:29 -07:00
Merge master.kernel.org:/pub/scm/linux/kernel/git/chrisw/lsm-2.6
2005-09-13 09:48:54 -07:00
Fix up ARM serial driver compile failure
2005-09-08 14:47:12 -07:00
[NET]: Optimize pskb_trim_rcsum()
2005-09-08 12:32:03 -07:00
[PATCH] mm/slab: fix sparse warnings
2005-09-10 10:06:26 -07:00
[PATCH] spinlock consolidation
2005-09-10 10:06:21 -07:00
[PATCH] spinlock consolidation
2005-09-10 10:06:21 -07:00
[PATCH] spinlock consolidation
2005-09-10 10:06:21 -07:00
[PATCH] spinlock consolidation
2005-09-10 10:06:21 -07:00
[PATCH] spinlock consolidation
2005-09-10 10:06:21 -07:00
[PATCH] spinlock consolidation
2005-09-10 10:06:21 -07:00
[PATCH] Adds sys_set_mempolicy() in include/linux/syscalls.h
2005-09-21 10:12:18 -07:00
[LLC]: Add sysctl support for the LLC timeouts
2005-09-22 04:30:44 -03:00
[CCID3]: Introduce include/linux/tfrc.h
2005-09-18 00:18:32 -07:00
[PATCH] time.h: remove ifdefs
2005-09-10 10:06:36 -07:00
[PATCH] timer initialization cleanup: DEFINE_TIMER
2005-09-09 14:03:48 -07:00
[PATCH] vesafb: Add blanking support
2005-09-09 13:57:58 -07:00
[PATCH] USB: URB_ASYNC_UNLINK flag removed from the kernel
2005-09-08 16:23:04 -07:00
[PATCH] USB: isp116x-hcd: remove clock() and reset()
2005-09-08 16:22:48 -07:00
[PATCH] USB: fix usbdevice_fs header breakage
2005-09-12 12:23:52 -07:00
[PATCH] v4l: common part Updates and tuner additions
2005-09-09 13:57:49 -07:00
[PATCH] v4l: experimental Sliced VBI API support
2005-09-13 08:22:32 -07:00
[PATCH] mm/filemap.c: make two functions static
2005-09-10 10:06:25 -07:00
