]> git.proxmox.com Git - mirror_ubuntu-kernels.git/commit
projects / mirror_ubuntu-kernels.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 45e0f30) | patch
keys: Fix request_key() lack of Link perm check on found key
authorDavid Howells <dhowells@redhat.com>
Wed, 19 Jun 2019 15:10:15 +0000 (16:10 +0100)
committerDavid Howells <dhowells@redhat.com>
Wed, 19 Jun 2019 15:10:15 +0000 (16:10 +0100)
commit504b69eb3c95180bc59f1ae9096ad4b10bbbf254
treef5d752709a378e608c13e3c517fa57fc49ad2fe9tree
parent45e0f30c30bb131663fbe1752974d6f2e39611e2commit | diff
keys: Fix request_key() lack of Link perm check on found key

The request_key() syscall allows a process to gain access to the 'possessor'
permits of any key that grants it Search permission by virtue of request_key()
not checking whether a key it finds grants Link permission to the caller.

Signed-off-by: David Howells <dhowells@redhat.com>
Documentation/security/keys/core.rst diff | blob | blame | history
security/keys/request_key.c diff | blob | blame | history
Ubuntu combined Linux kernel mirror