Zoran Markovic 54e71cb050 smack: fix access permissions for keyring ... [ Upstream commit 5b841bfab695e3b8ae793172a9ff7990f99cc3e2 ] Function smack_key_permission() only issues smack requests for the following operations: - KEY_NEED_READ (issues MAY_READ) - KEY_NEED_WRITE (issues MAY_WRITE) - KEY_NEED_LINK (issues MAY_WRITE) - KEY_NEED_SETATTR (issues MAY_WRITE) A blank smack request is issued in all other cases, resulting in smack access being granted if there is any rule defined between subject and object, or denied with -EACCES otherwise. Request MAY_READ access for KEY_NEED_SEARCH and KEY_NEED_VIEW. Fix the logic in the unlikely case when both MAY_READ and MAY_WRITE are needed. Validate access permission field for valid contents. Signed-off-by: Zoran Markovic <zmarkovic@sierrawireless.com> Signed-off-by: Casey Schaufler <casey@schaufler-ca.com> Cc: Casey Schaufler <casey@schaufler-ca.com> Cc: James Morris <jmorris@namei.org> Cc: "Serge E. Hallyn" <serge@hallyn.com> Signed-off-by: Sasha Levin <sashal@kernel.org>		2019-02-12 19:47:05 +01:00
..
apparmor	apparmor: Fix uninitialized value in aa_split_fqname	2018-11-27 16:13:00 +01:00
integrity	ima: open a new file instance if no read permissions	2018-11-13 11:08:46 -08:00
keys	Revert "uapi/linux/keyctl.h: don't use C++ reserved keyword as a struct member name"	2018-09-25 13:28:58 +02:00
loadpin	module: replace the existing LSM hook in init_module	2018-07-16 12:31:57 -07:00
selinux	selinux: always allow mounting submounts	2019-01-26 09:32:36 +01:00
smack	smack: fix access permissions for keyring	2019-02-12 19:47:05 +01:00
tomoyo	Kbuild updates for v4.19	2018-08-15 12:09:03 -07:00
yama	Yama: Check for pid death before checking ancestry	2019-01-22 21:40:32 +01:00
commoncap.c	cap_inode_getsecurity: use d_find_any_alias() instead of d_find_alias()	2018-08-11 02:05:53 -05:00
device_cgroup.c	docs: fix broken references with multiple hints	2018-06-15 18:10:01 -03:00
inode.c
Kconfig	Revert "x86/mm/legacy: Populate the user page-table with user pgd's"	2018-09-14 17:08:45 +02:00
lsm_audit.c	audit: use inline function to get audit context	2018-05-14 17:24:18 -04:00
Makefile
min_addr.c
security.c	LSM: Check for NULL cred-security on free	2019-01-22 21:40:35 +01:00