KEYS: Make /proc/keys check to see if a key is possessed before security check
authorDavid Howells <dhowells@redhat.com>
Fri, 11 Jun 2010 16:31:10 +0000 (17:31 +0100)
committerJames Morris <jmorris@namei.org>
Mon, 2 Aug 2010 05:34:27 +0000 (15:34 +1000)
Make /proc/keys check to see if the calling process possesses each key before
performing the security check.  The possession check can be skipped if the key
doesn't have the possessor-view permission bit set.

This causes the keys a process possesses to show up in /proc/keys, even if they
don't have matching user/group/other view permissions.

Signed-off-by: David Howells <dhowells@redhat.com>
Signed-off-by: James Morris <jmorris@namei.org>

No differences found