| commit | 927942aabbbe506bf9bc70a16dc5460ecc64c148 | |
| author | David Howells <dhowells@redhat.com> | |
| Fri, 11 Jun 2010 16:31:10 +0000 (11 17:31 +0100) | ||
| committer | James Morris <jmorris@namei.org> | |
| Mon, 2 Aug 2010 05:34:27 +0000 (2 15:34 +1000) | ||
| tree | 2c53ccb405bd4afb03ff9f7acab892fafc7e9b0f | treesnapshot (tar.gz zip) |
| parent | 9156235b3427d6f01c5c95022f72f381f07583f5 | commitdiff |
KEYS: Make /proc/keys check to see if a key is possessed before security check
Make /proc/keys check to see if the calling process possesses each key before
performing the security check. The possession check can be skipped if the key
doesn't have the possessor-view permission bit set.
This causes the keys a process possesses to show up in /proc/keys, even if they
don't have matching user/group/other view permissions.
Signed-off-by: David Howells <dhowells@redhat.com>
Signed-off-by: James Morris <jmorris@namei.org>
Make /proc/keys check to see if the calling process possesses each key before
performing the security check. The possession check can be skipped if the key
doesn't have the possessor-view permission bit set.
This causes the keys a process possesses to show up in /proc/keys, even if they
don't have matching user/group/other view permissions.
Signed-off-by: David Howells <dhowells@redhat.com>
Signed-off-by: James Morris <jmorris@namei.org>
| security/keys/internal.h | diffblobblamehistory | |
| security/keys/proc.c | diffblobblamehistory | |
| security/keys/process_keys.c | diffblobblamehistory |