| commit | 504b69eb3c95180bc59f1ae9096ad4b10bbbf254 | [log] [tgz] |
|---|---|---|
| author | David Howells <dhowells@redhat.com> | Wed Jun 19 16:10:15 2019 +0100 |
| committer | David Howells <dhowells@redhat.com> | Wed Jun 19 16:10:15 2019 +0100 |
| tree | f5d752709a378e608c13e3c517fa57fc49ad2fe9 | |
| parent | 45e0f30c30bb131663fbe1752974d6f2e39611e2 [diff] |
keys: Fix request_key() lack of Link perm check on found key The request_key() syscall allows a process to gain access to the 'possessor' permits of any key that grants it Search permission by virtue of request_key() not checking whether a key it finds grants Link permission to the caller. Signed-off-by: David Howells <dhowells@redhat.com>