KEYS: Make /proc/keys check to see if a key is possessed before security check
authorDavid Howells <dhowells@redhat.com>
Fri, 11 Jun 2010 16:31:10 +0000 (17:31 +0100)
committerJames Morris <jmorris@namei.org>
Mon, 2 Aug 2010 05:34:27 +0000 (15:34 +1000)
commit927942aabbbe506bf9bc70a16dc5460ecc64c148
tree2c53ccb405bd4afb03ff9f7acab892fafc7e9b0f
parent9156235b3427d6f01c5c95022f72f381f07583f5
KEYS: Make /proc/keys check to see if a key is possessed before security check

Make /proc/keys check to see if the calling process possesses each key before
performing the security check.  The possession check can be skipped if the key
doesn't have the possessor-view permission bit set.

This causes the keys a process possesses to show up in /proc/keys, even if they
don't have matching user/group/other view permissions.

Signed-off-by: David Howells <dhowells@redhat.com>
Signed-off-by: James Morris <jmorris@namei.org>
security/keys/internal.h
security/keys/proc.c
security/keys/process_keys.c