]> git.proxmox.com Git - mirror_ubuntu-bionic-kernel.git/commit
cifs: explicitly revoke SPNEGO key after session setup
authorJeff Layton <jlayton@redhat.com>
Wed, 24 Sep 2008 15:32:59 +0000 (11:32 -0400)
committerSteve French <sfrench@us.ibm.com>
Wed, 24 Sep 2008 20:59:37 +0000 (20:59 +0000)
commitdfd15c46a6c2cafb006183c0c14f07e59eee4ac0
treebfd9c0f4be99841c2638bfe6985676bb789b0610
parentd9414774dc0c7b395036deeca000af42e2d13612
cifs: explicitly revoke SPNEGO key after session setup

cifs: explicitly revoke SPNEGO key after session setup

The SPNEGO blob returned by an upcall can only be used once. Explicitly
revoke it to make sure that we never pick it up again after session
setup exits.

This doesn't seem to be that big an issue on more recent kernels, but
older kernels seem to link keys into the session keyring by default.
That said, explicitly revoking the key seems like a reasonable thing
to do here.

Signed-off-by: Jeff Layton <jlayton@redhat.com>
Signed-off-by: Steve French <sfrench@us.ibm.com>
fs/cifs/sess.c