Eric Biggers 71d8548735 KEYS: restrict /proc/keys by credentials at open time ...

commit 4aa68e07d8 upstream.

When checking for permission to view keys whilst reading from
/proc/keys, we should use the credentials with which the /proc/keys file
was opened.  This is because, in a classic type of exploit, it can be
possible to bypass checks for the *current* credentials by passing the
file descriptor to a suid program.

Following commit 34dbbcdbf6 ("Make file credentials available to the
seqfile interfaces") we can finally fix it.  So let's do it.

Signed-off-by: Eric Biggers <ebiggers@google.com>
Signed-off-by: David Howells <dhowells@redhat.com>
Signed-off-by: Zubin Mithra <zsm@chromium.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2023-05-15 11:54:43 +09:00

..

encrypted-keys

Merge 4.9.81 into android-4.9

2018-02-13 12:57:29 +01:00

big_key.c

KEYS: Fix race between updating and finding a negative key

2017-10-27 10:38:11 +02:00

compat.c

KEYS: Add placeholder for KDF usage with DH

2016-06-03 16:14:34 +10:00

dh.c

f2fs: catch up to v4.14-rc1

2017-10-13 11:27:08 +00:00

gc.c

KEYS: Fix race between updating and finding a negative key

2017-10-27 10:38:11 +02:00

internal.h

KEYS: prevent creating a different user's keyrings

2017-10-05 09:44:00 +02:00

Kconfig

security/keys: BIG_KEY requires CONFIG_CRYPTO

2018-02-25 11:05:53 +01:00

key.c

KEYS: allow reaching the keys quotas exactly

2023-05-15 11:44:07 +09:00

keyctl.c

KEYS: Fix race between updating and finding a negative key

2017-10-27 10:38:11 +02:00

keyring.c

KEYS: always initialize keyring_index_key::desc_len

2023-05-15 11:44:59 +09:00

Makefile

KEYS: Add KEYCTL_DH_COMPUTE command

2016-04-12 19:54:58 +01:00

permission.c

KEYS: Move the flags representing required permission to linux/key.h

2014-03-14 17:44:49 +00:00

persistent.c

KEYS: Strip trailing spaces

2016-06-14 10:29:44 +01:00

proc.c

KEYS: restrict /proc/keys by credentials at open time

2023-05-15 11:54:43 +09:00

process_keys.c

KEYS: Fix race between updating and finding a negative key

2017-10-27 10:38:11 +02:00

request_key_auth.c

KEYS: always initialize keyring_index_key::desc_len

2023-05-15 11:44:59 +09:00

request_key.c

KEYS: always initialize keyring_index_key::desc_len

2023-05-15 11:44:59 +09:00

sysctl.c

security: Convert use of typedef ctl_table to struct ctl_table

2014-04-15 13:39:58 +10:00

trusted.c

Merge 4.9.62 into android-4.9

2017-11-15 16:13:49 +01:00

trusted.h

keys, trusted: move struct trusted_key_options to trusted-type.h

2015-10-19 01:01:21 +02:00

user_defined.c

Merge 4.9.59 into android-4.9

2017-10-30 09:27:09 +01:00