Commit 2ea190d0 authored Feb 26, 2009 by Serge E. Hallyn Committed by James Morris Feb 27, 2009

keys: skip keys from another user namespace



When listing keys, do not return keys belonging to the
same uid in another user namespace.  Otherwise uid 500
in another user namespace will return keyrings called
uid.500 for another user namespace.

Signed-off-by: Serge E. Hallyn <serue@us.ibm.com>
Acked-by: David Howells <dhowells@redhat.com>
Signed-off-by: James Morris <jmorris@namei.org>

parent 8ff3bc31

security/keys/keyring.c

+3 −0

Original line number	Diff line number	Diff line
		@@ -539,6 +539,9 @@ struct key find_keyring_by_name(const char name, bool skip_perm_check)
		&keyring_name_hash[bucket],
		type_data.link
		) {
		if (keyring->user->user_ns != current_user_ns())
		continue;

		if (test_bit(KEY_FLAG_REVOKED, &keyring->flags))
		continue;

Admin message