lkml.org 
[lkml]   [2009]   [Jan]   [9]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
    Patch in this message
    /
    Date
    From
    Subject[PATCH 3/4] keys: skip keys from another user namespace

    When listing keys, do not return keys belonging to the
    same uid in another user namespace. Otherwise uid 500
    in another user namespace will return keyrings called
    uid.500 for another user namespace.

    Signed-off-by: Serge E. Hallyn <serue@us.ibm.com>
    ---
    security/keys/keyring.c | 3 +++
    1 files changed, 3 insertions(+), 0 deletions(-)

    diff --git a/security/keys/keyring.c b/security/keys/keyring.c
    index ed85157..3dba81c 100644
    --- a/security/keys/keyring.c
    +++ b/security/keys/keyring.c
    @@ -539,6 +539,9 @@ struct key *find_keyring_by_name(const char *name, bool skip_perm_check)
    &keyring_name_hash[bucket],
    type_data.link
    ) {
    + if (keyring->user->user_ns != current_user_ns())
    + continue;
    +
    if (test_bit(KEY_FLAG_REVOKED, &keyring->flags))
    continue;

    --
    1.5.4.3


    \
     
     \ /
      Last update: 2009-01-09 23:55    [W:8.543 / U:0.076 seconds]
    ©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site