David Howells 911b79cde9 KEYS: Don't permit request_key() to construct a new keyring ... If request_key() is used to find a keyring, only do the search part - don't do the construction part if the keyring was not found by the search. We don't really want keyrings in the negative instantiated state since the rejected/negative instantiation error value in the payload is unioned with keyring metadata. Now the kernel gives an error: request_key("keyring", "#selinux,bdekeyring", "keyring", KEY_SPEC_USER_SESSION_KEYRING) = -1 EPERM (Operation not permitted) Signed-off-by: David Howells <dhowells@redhat.com>		2015-10-19 11:24:51 +01:00
..
apparmor
integrity
keys	KEYS: Don't permit request_key() to construct a new keyring	2015-10-19 11:24:51 +01:00
selinux	mm: mark most vm_operations_struct const	2015-09-10 13:29:01 -07:00
smack
tomoyo
yama
commoncap.c
device_cgroup.c
inode.c
Kconfig
lsm_audit.c
Makefile
min_addr.c
security.c	Merge branch 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security	2015-09-08 12:41:25 -07:00