David Howells 911b79cde9 KEYS: Don't permit request_key() to construct a new keyring ...

If request_key() is used to find a keyring, only do the search part - don't
do the construction part if the keyring was not found by the search.  We
don't really want keyrings in the negative instantiated state since the
rejected/negative instantiation error value in the payload is unioned with
keyring metadata.

Now the kernel gives an error:

	request_key("keyring", "#selinux,bdekeyring", "keyring", KEY_SPEC_USER_SESSION_KEYRING) = -1 EPERM (Operation not permitted)

Signed-off-by: David Howells <dhowells@redhat.com>

2015-10-19 11:24:51 +01:00

..

encrypted-keys

KEYS: Fix stale key registration at error path

2014-12-06 21:50:36 -05:00

big_key.c

KEYS: Remove key_type::match in favour of overriding default by match_preparse

2014-09-16 17:36:06 +01:00

compat.c

switch keyctl_instantiate_key_common() to iov_iter

2015-04-11 22:27:12 -04:00

gc.c

KEYS: Fix crash when attempt to garbage collect an uninstantiated keyring

2015-10-15 17:21:37 +01:00

internal.h

switch keyctl_instantiate_key_common() to iov_iter

2015-04-11 22:27:12 -04:00

Kconfig

KEYS: Make /proc/keys unconditional if CONFIG_KEYS=y

2015-01-22 22:34:32 +00:00

key.c

KEYS: remove a bogus NULL check

2014-12-16 18:05:20 +11:00

keyctl.c

switch keyctl_instantiate_key_common() to iov_iter

2015-04-11 22:27:12 -04:00

keyring.c

KEYS: ensure we free the assoc array edit if edit is valid

2015-07-28 13:08:23 +10:00

Makefile

KEYS: Add per-user_namespace registers for persistent per-UID kerberos caches

2013-09-24 10:35:19 +01:00

permission.c

KEYS: Move the flags representing required permission to linux/key.h

2014-03-14 17:44:49 +00:00

persistent.c

KEYS: Move the flags representing required permission to linux/key.h

2014-03-14 17:44:49 +00:00

proc.c

KEYS: Make /proc/keys unconditional if CONFIG_KEYS=y

2015-01-22 22:34:32 +00:00

process_keys.c

capabilities: ambient capabilities

2015-09-04 16:54:41 -07:00

request_key_auth.c

KEYS: Simplify KEYRING_SEARCH_{NO,DO}_STATE_CHECK flags

2014-12-01 22:52:50 +00:00

request_key.c

KEYS: Don't permit request_key() to construct a new keyring

2015-10-19 11:24:51 +01:00

sysctl.c

security: Convert use of typedef ctl_table to struct ctl_table

2014-04-15 13:39:58 +10:00

trusted.c

KEYS: Remove key_type::match in favour of overriding default by match_preparse

2014-09-16 17:36:06 +01:00

trusted.h

trusted-keys: rename trusted_defined files to trusted

2011-01-24 10:14:22 +11:00

user_defined.c

KEYS: Remove key_type::match in favour of overriding default by match_preparse

2014-09-16 17:36:06 +01:00