Eric Biggers ccc2aae5c4 KEYS: restrict /proc/keys by credentials at open time ...

commit 4aa68e07d8 upstream.

When checking for permission to view keys whilst reading from
/proc/keys, we should use the credentials with which the /proc/keys file
was opened.  This is because, in a classic type of exploit, it can be
possible to bypass checks for the *current* credentials by passing the
file descriptor to a suid program.

Following commit 34dbbcdbf6 ("Make file credentials available to the
seqfile interfaces") we can finally fix it.  So let's do it.

Signed-off-by: Eric Biggers <ebiggers@google.com>
Signed-off-by: David Howells <dhowells@redhat.com>
Signed-off-by: Zubin Mithra <zsm@chromium.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2019-03-19 13:14:08 +01:00

..

encrypted-keys

KEYS: encrypted: fix buffer overread in valid_master_desc()

2018-02-13 12:35:57 +01:00

big_key.c

KEYS: Fix race between updating and finding a negative key

2017-10-27 10:38:11 +02:00

compat.c

KEYS: Add placeholder for KDF usage with DH

2016-06-03 16:14:34 +10:00

dh.c

KEYS: Add placeholder for KDF usage with DH

2016-06-03 16:14:34 +10:00

gc.c

KEYS: Fix race between updating and finding a negative key

2017-10-27 10:38:11 +02:00

internal.h

KEYS: prevent creating a different user's keyrings

2017-10-05 09:44:00 +02:00

Kconfig

security/keys: BIG_KEY requires CONFIG_CRYPTO

2018-02-25 11:05:53 +01:00

key.c

KEYS: allow reaching the keys quotas exactly

2019-02-27 10:06:58 +01:00

keyctl.c

KEYS: Fix race between updating and finding a negative key

2017-10-27 10:38:11 +02:00

keyring.c

KEYS: always initialize keyring_index_key::desc_len

2019-02-27 10:07:00 +01:00

Makefile

KEYS: Add KEYCTL_DH_COMPUTE command

2016-04-12 19:54:58 +01:00

permission.c

KEYS: Move the flags representing required permission to linux/key.h

2014-03-14 17:44:49 +00:00

persistent.c

KEYS: Strip trailing spaces

2016-06-14 10:29:44 +01:00

proc.c

KEYS: restrict /proc/keys by credentials at open time

2019-03-19 13:14:08 +01:00

process_keys.c

KEYS: Fix race between updating and finding a negative key

2017-10-27 10:38:11 +02:00

request_key_auth.c

KEYS: always initialize keyring_index_key::desc_len

2019-02-27 10:07:00 +01:00

request_key.c

KEYS: always initialize keyring_index_key::desc_len

2019-02-27 10:07:00 +01:00

sysctl.c

security: Convert use of typedef ctl_table to struct ctl_table

2014-04-15 13:39:58 +10:00

trusted.c

KEYS: trusted: fix writing past end of buffer in trusted_read()

2017-11-15 15:53:17 +01:00

trusted.h

keys, trusted: move struct trusted_key_options to trusted-type.h

2015-10-19 01:01:21 +02:00

user_defined.c

KEYS: Fix race between updating and finding a negative key

2017-10-27 10:38:11 +02:00