You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

Jeff Layton 9f6ed2ca25 keys: add a "logon" key type ... For CIFS, we want to be able to store NTLM credentials (aka username and password) in the keyring. We do not, however want to allow users to fetch those keys back out of the keyring since that would be a security risk. Unfortunately, due to the nuances of key permission bits, it's not possible to do this. We need to grant search permissions so the kernel can find these keys, but that also implies permissions to read the payload. Resolve this by adding a new key_type. This key type is essentially the same as key_type_user, but does not define a .read op. This prevents the payload from ever being visible from userspace. This key type also vets the description to ensure that it's "qualified" by checking to ensure that it has a ':' in it that is preceded by other characters. Acked-by: David Howells <dhowells@redhat.com> Signed-off-by: Jeff Layton <jlayton@redhat.com> Signed-off-by: Steve French <smfrench@gmail.com>		13 years ago
..
apparmor	Merge branch 'for-linus' of git://selinuxproject.org/~jmorris/linux-security	13 years ago
integrity	…
keys	keys: add a "logon" key type	13 years ago
selinux	Merge branch 'for-linus' of git://selinuxproject.org/~jmorris/linux-security	13 years ago
smack	…
tomoyo	Merge branch 'for-linus' of git://selinuxproject.org/~jmorris/linux-security	13 years ago
Kconfig	…
Makefile	…
capability.c	…
commoncap.c	…
device_cgroup.c	…
inode.c	…
lsm_audit.c	…
min_addr.c	…
security.c	…