[PATCH] KEYS: add missing permission check for request_key() destination

David Howells dhowells at redhat.com
Tue Nov 28 10:13:01 UTC 2017


Eric Biggers <ebiggers3 at gmail.com> wrote:

> +		if (do_perm_check) {
> +			ret = key_permission(make_key_ref(dest_keyring, 1),
> +					     KEY_NEED_WRITE);

dest_keyring may be NULL at this point as alloc_uid() doesn't automatically
create keyrings.

David
--
To unsubscribe from this list: send the line "unsubscribe linux-security-module" in
the body of a message to majordomo at vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html



More information about the Linux-security-module-archive mailing list