Serge E. Hallyn <[email protected]> wrote:
> The security_key_alloc() function acted as both an authorizer and
> security structure allocation function. These roles should be
> separated. There are two reasons for this.
Your patch is part of what I had originally, but this was mildly objected to
because SE Linux didn't care, so I dropped the post function for later
resurrection. See the email thread rooted on:
| From: David Howells <[email protected]>
| To: [email protected], [email protected]
| Date: Wed, 05 Oct 2005 17:28:34 +0100
| Cc: [email protected], [email protected]
| Subject: [Keyrings] [PATCH] Keys: Add LSM hooks for key management
in which I included key_post_alloc():
/* publish the key by giving it a serial number */
atomic_inc(&user->nkeys);
key_alloc_serial(key);
- error:
+ /* let the security module know the key has been published */
+ security_key_post_alloc(key);
+
+error:
I'm happy with this patch, though I'd like the comment you can see in the
above snippet to be added back into key.c too.
Note also that by the time the post function is called, it's a little late to
be authorising creation of the key since the key has been published by that
point.
Acked-By: David Howells <[email protected]>
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to [email protected]
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/
[Index of Archives]
[Kernel Newbies]
[Netfilter]
[Bugtraq]
[Photo]
[Stuff]
[Gimp]
[Yosemite News]
[MIPS Linux]
[ARM Linux]
[Linux Security]
[Linux RAID]
[Video 4 Linux]
[Linux for the blind]
[Linux Resources]
