Mimi Zohar a4e3b8d79a KEYS: special dot prefixed keyring name bug fix ...

Dot prefixed keyring names are supposed to be reserved for the
kernel, but add_key() calls key_get_type_from_user(), which
incorrectly verifies the 'type' field, not the 'description' field.
This patch verifies the 'description' field isn't dot prefixed,
when creating a new keyring, and removes the dot prefix test in
key_get_type_from_user().

Changelog v6:
- whitespace and other cleanup

Changelog v5:
- Only prevent userspace from creating a dot prefixed keyring, not
  regular keys  - Dmitry

Reported-by: Dmitry Kasatkin <d.kasatkin@samsung.com>
Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>
Acked-by: David Howells <dhowells@redhat.com>

2014-07-17 09:35:14 -04:00

..

encrypted-keys

security: replace strict_strto*() with kstrto*()

2014-02-06 19:11:04 +11:00

big_key.c

security: shmem: implement kernel private shmem inodes

2013-12-02 11:24:19 +00:00

compat.c

security/compat: convert to COMPAT_SYSCALL_DEFINE

2014-03-06 16:30:42 +01:00

gc.c

KEYS: Fix keyring content gc scanner

2013-11-14 14:09:53 +00:00

internal.h

KEYS: Move the flags representing required permission to linux/key.h

2014-03-14 17:44:49 +00:00

Kconfig

KEYS: Make BIG_KEYS boolean

2013-10-30 11:15:23 +00:00

key.c

KEYS: Move the flags representing required permission to linux/key.h

2014-03-14 17:44:49 +00:00

keyctl.c

KEYS: special dot prefixed keyring name bug fix

2014-07-17 09:35:14 -04:00

keyring.c

KEYS: Move the flags representing required permission to linux/key.h

2014-03-14 17:44:49 +00:00

Makefile

KEYS: Add per-user_namespace registers for persistent per-UID kerberos caches

2013-09-24 10:35:19 +01:00

permission.c

KEYS: Move the flags representing required permission to linux/key.h

2014-03-14 17:44:49 +00:00

persistent.c

KEYS: Move the flags representing required permission to linux/key.h

2014-03-14 17:44:49 +00:00

proc.c

KEYS: Move the flags representing required permission to linux/key.h

2014-03-14 17:44:49 +00:00

process_keys.c

KEYS: initialize root uid and session keyrings early

2013-09-25 17:17:01 +01:00

request_key_auth.c

KEYS: Search for auth-key by name rather than target key ID

2013-09-24 10:35:16 +01:00

request_key.c

KEYS: Fix a race between negating a key and reading the error set

2013-10-30 11:15:24 +00:00

sysctl.c

security: Convert use of typedef ctl_table to struct ctl_table

2014-04-15 13:39:58 +10:00

trusted.c

security: replace strict_strto*() with kstrto*()

2014-02-06 19:11:04 +11:00

trusted.h

trusted-keys: rename trusted_defined files to trusted

2011-01-24 10:14:22 +11:00

user_defined.c

KEYS: Introduce a search context structure

2013-09-24 10:35:15 +01:00