Home
last modified time | relevance | path

Searched hist:a4e3b8d7 (Results 1 – 1 of 1) sorted by relevance

/openbmc/linux/security/keys/
H A Dkeyctl.ca4e3b8d7 Thu May 22 13:02:23 CDT 2014 Mimi Zohar <zohar@linux.vnet.ibm.com> KEYS: special dot prefixed keyring name bug fix

Dot prefixed keyring names are supposed to be reserved for the
kernel, but add_key() calls key_get_type_from_user(), which
incorrectly verifies the 'type' field, not the 'description' field.
This patch verifies the 'description' field isn't dot prefixed,
when creating a new keyring, and removes the dot prefix test in
key_get_type_from_user().

Changelog v6:
- whitespace and other cleanup

Changelog v5:
- Only prevent userspace from creating a dot prefixed keyring, not
regular keys - Dmitry

Reported-by: Dmitry Kasatkin <d.kasatkin@samsung.com>
Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>
Acked-by: David Howells <dhowells@redhat.com>