Messages in this thread | | | From | Alexei Starovoitov <> | Date | Fri, 10 Jun 2022 09:30:26 -0700 | Subject | Re: [PATCH v3 1/2] bpf: Add bpf_verify_signature() helper |
| |
On Fri, Jun 10, 2022 at 6:59 AM Roberto Sassu <roberto.sassu@huawei.com> wrote: > + keyring = (keyring_id == U16_MAX) ? > + cred->session_keyring : (struct key *)keyring_id;
This is too limiting. bpf prog should be able to do what *key syscalls can do. By doing lookup_user_key(id) -> keyring. Maybe it's ok to have a special reserved id that does cred->sessions_keyring as a shortcut, but that's an optimization.
| |