Repository files (latest commit first)

Filename	Latest commit message	Latest commit date
David Howells 911b79cde9 KEYS: Don't permit request_key() to construct a new keyring ... If request_key() is used to find a keyring, only do the search part - don't do the construction part if the keyring was not found by the search. We don't really want keyrings in the negative instantiated state since the rejected/negative instantiation error value in the payload is unioned with keyring metadata. Now the kernel gives an error: request_key("keyring", "#selinux,bdekeyring", "keyring", KEY_SPEC_USER_SESSION_KEYRING) = -1 EPERM (Operation not permitted) Signed-off-by: David Howells <dhowells@redhat.com>		2015-10-19 11:24:51 +01:00
..
encrypted-keys	KEYS: Fix stale key registration at error path	2014-12-06 21:50:36 -05:00
big_key.c
compat.c	switch keyctl_instantiate_key_common() to iov_iter	2015-04-11 22:27:12 -04:00
gc.c	KEYS: Fix crash when attempt to garbage collect an uninstantiated keyring	2015-10-15 17:21:37 +01:00
internal.h	switch keyctl_instantiate_key_common() to iov_iter	2015-04-11 22:27:12 -04:00
Kconfig	KEYS: Make /proc/keys unconditional if CONFIG_KEYS=y	2015-01-22 22:34:32 +00:00
key.c	KEYS: remove a bogus NULL check	2014-12-16 18:05:20 +11:00
keyctl.c	switch keyctl_instantiate_key_common() to iov_iter	2015-04-11 22:27:12 -04:00
keyring.c	KEYS: ensure we free the assoc array edit if edit is valid	2015-07-28 13:08:23 +10:00
Makefile
permission.c
persistent.c
proc.c	KEYS: Make /proc/keys unconditional if CONFIG_KEYS=y	2015-01-22 22:34:32 +00:00
process_keys.c	capabilities: ambient capabilities	2015-09-04 16:54:41 -07:00
request_key.c	KEYS: Don't permit request_key() to construct a new keyring	2015-10-19 11:24:51 +01:00
request_key_auth.c
sysctl.c
trusted.c
trusted.h
user_defined.c