1 /* key-ui.h: key userspace interface stuff
3 * Copyright (C) 2004 Red Hat, Inc. All Rights Reserved.
4 * Written by David Howells (dhowells@redhat.com)
6 * This program is free software; you can redistribute it and/or
7 * modify it under the terms of the GNU General Public License
8 * as published by the Free Software Foundation; either version
9 * 2 of the License, or (at your option) any later version.
12 #ifndef _LINUX_KEY_UI_H
13 #define _LINUX_KEY_UI_H
15 #include <linux/key.h>
18 extern struct rb_root key_serial_tree
;
19 extern spinlock_t key_serial_lock
;
21 /* required permissions */
22 #define KEY_VIEW 0x01 /* require permission to view attributes */
23 #define KEY_READ 0x02 /* require permission to read content */
24 #define KEY_WRITE 0x04 /* require permission to update / modify */
25 #define KEY_SEARCH 0x08 /* require permission to search (keyring) or find (key) */
26 #define KEY_LINK 0x10 /* require permission to link */
27 #define KEY_ALL 0x1f /* all the above permissions */
30 * the keyring payload contains a list of the keys to which the keyring is
34 struct rcu_head rcu
; /* RCU deletion hook */
35 unsigned short maxkeys
; /* max keys this list can hold */
36 unsigned short nkeys
; /* number of keys currently held */
37 unsigned short delkey
; /* key to be unlinked by RCU */
43 * check to see whether permission is granted to use a key in the desired way
45 static inline int key_permission(const key_ref_t key_ref
, key_perm_t perm
)
47 struct key
*key
= key_ref_to_ptr(key_ref
);
50 if (is_key_possessed(key_ref
))
51 kperm
= key
->perm
>> 24;
52 else if (key
->uid
== current
->fsuid
)
53 kperm
= key
->perm
>> 16;
54 else if (key
->gid
!= -1 &&
55 key
->perm
& KEY_GRP_ALL
&&
58 kperm
= key
->perm
>> 8;
62 kperm
= kperm
& perm
& KEY_ALL
;
68 * check to see whether permission is granted to use a key in at least one of
71 static inline int key_any_permission(const key_ref_t key_ref
, key_perm_t perm
)
73 struct key
*key
= key_ref_to_ptr(key_ref
);
76 if (is_key_possessed(key_ref
))
77 kperm
= key
->perm
>> 24;
78 else if (key
->uid
== current
->fsuid
)
79 kperm
= key
->perm
>> 16;
80 else if (key
->gid
!= -1 &&
81 key
->perm
& KEY_GRP_ALL
&&
84 kperm
= key
->perm
>> 8;
88 kperm
= kperm
& perm
& KEY_ALL
;
93 static inline int key_task_groups_search(struct task_struct
*tsk
, gid_t gid
)
98 ret
= groups_search(tsk
->group_info
, gid
);
103 static inline int key_task_permission(const key_ref_t key_ref
,
104 struct task_struct
*context
,
107 struct key
*key
= key_ref_to_ptr(key_ref
);
110 if (is_key_possessed(key_ref
)) {
111 kperm
= key
->perm
>> 24;
113 else if (key
->uid
== context
->fsuid
) {
114 kperm
= key
->perm
>> 16;
116 else if (key
->gid
!= -1 &&
117 key
->perm
& KEY_GRP_ALL
&& (
118 key
->gid
== context
->fsgid
||
119 key_task_groups_search(context
, key
->gid
)
122 kperm
= key
->perm
>> 8;
128 kperm
= kperm
& perm
& KEY_ALL
;
130 return kperm
== perm
;
134 extern key_ref_t
lookup_user_key(struct task_struct
*context
,
135 key_serial_t id
, int create
, int partial
,
138 extern long join_session_keyring(const char *name
);
140 extern struct key_type
*key_type_lookup(const char *type
);
141 extern void key_type_put(struct key_type
*ktype
);
143 #define key_negative_timeout 60 /* default timeout on a negative key's existence */
146 #endif /* _LINUX_KEY_UI_H */