Zoran Markovic 9c58ef240c smack: fix access permissions for keyring ... [ Upstream commit 5b841bfab6 ] Function smack_key_permission() only issues smack requests for the following operations: - KEY_NEED_READ (issues MAY_READ) - KEY_NEED_WRITE (issues MAY_WRITE) - KEY_NEED_LINK (issues MAY_WRITE) - KEY_NEED_SETATTR (issues MAY_WRITE) A blank smack request is issued in all other cases, resulting in smack access being granted if there is any rule defined between subject and object, or denied with -EACCES otherwise. Request MAY_READ access for KEY_NEED_SEARCH and KEY_NEED_VIEW. Fix the logic in the unlikely case when both MAY_READ and MAY_WRITE are needed. Validate access permission field for valid contents. Signed-off-by: Zoran Markovic <zmarkovic@sierrawireless.com> Signed-off-by: Casey Schaufler <casey@schaufler-ca.com> Cc: Casey Schaufler <casey@schaufler-ca.com> Cc: James Morris <jmorris@namei.org> Cc: "Serge E. Hallyn" <serge@hallyn.com> Signed-off-by: Sasha Levin <sashal@kernel.org>		2019-02-12 19:46:01 +01:00
..
Kconfig	Smack: Signal delivery as an append operation	2016-09-08 13:22:56 -07:00
Makefile	Smack: Repair netfilter dependency	2015-01-23 10:08:19 -08:00
smack.h	Smack: Use cap_capable in privilege check	2017-06-01 09:27:21 -07:00
smack_access.c	Smack: Use cap_capable in privilege check	2017-06-01 09:27:21 -07:00
smack_lsm.c	smack: fix access permissions for keyring	2019-02-12 19:46:01 +01:00
smack_netfilter.c	netfilter: nf_hook_ops structs can be const	2017-07-31 19:10:44 +02:00
smackfs.c	fs: constify tree_descr arrays passed to simple_fill_super()	2017-04-26 23:54:06 -04:00