Silvio Gissi e4519a0166 keys: Fix overwrite of key expiration on instantiation ... commit 9da27fb65a upstream. The expiry time of a key is unconditionally overwritten during instantiation, defaulting to turn it permanent. This causes a problem for DNS resolution as the expiration set by user-space is overwritten to TIME64_MAX, disabling further DNS updates. Fix this by restoring the condition that key_set_expiry is only called when the pre-parser sets a specific expiry. Fixes: 39299bdd25 ("keys, dns: Allow key types (eg. DNS) to be reclaimed immediately on expiry") Signed-off-by: Silvio Gissi <sifonsec@amazon.com> cc: David Howells <dhowells@redhat.com> cc: Hazem Mohamed Abuelfotoh <abuehaze@amazon.com> cc: linux-afs@lists.infradead.org cc: linux-cifs@vger.kernel.org cc: keyrings@vger.kernel.org cc: netdev@vger.kernel.org cc: stable@vger.kernel.org Reviewed-by: Jarkko Sakkinen <jarkko@kernel.org> Signed-off-by: Jarkko Sakkinen <jarkko@kernel.org> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>		2024-05-17 11:56:23 +02:00
..
apparmor	apparmor: Free up __cleanup() name	2024-02-23 09:12:51 +01:00
bpf	…
integrity	ima: detect changes to the backing overlay file	2023-11-28 17:07:12 +00:00
keys	keys: Fix overwrite of key expiration on instantiation	2024-05-17 11:56:23 +02:00
landlock	landlock: Warn once if a Landlock action is requested while disabled	2024-04-03 15:19:32 +02:00
loadpin	LoadPin: Ignore the "contents" argument of the LSM hooks	2022-12-31 13:33:07 +01:00
lockdown	…
safesetid	…
selinux	lsm: new security_file_ioctl_compat() hook	2024-01-31 16:17:00 -08:00
smack	smack: Handle SMACK64TRANSMUTE in smack_inode_setsecurity()	2024-04-03 15:19:24 +02:00
tomoyo	tomoyo: fix UAF write bug in tomoyo_write_control()	2024-03-06 14:45:09 +00:00
yama	…
Kconfig	…
Kconfig.hardening	randstruct: disable Clang 15 support	2023-02-25 11:25:43 +01:00
Makefile	…
commoncap.c	capabilities: fix potential memleak on error path from vfs_getxattr_alloc()	2022-10-28 06:44:33 -04:00
device_cgroup.c	device_cgroup: Roll back to original exceptions after copy failure	2023-01-07 11:11:56 +01:00
inode.c	…
lsm_audit.c	…
min_addr.c	…
security.c	lsm: fix the logic in security_inode_getsecctx()	2024-02-23 09:12:37 +01:00