twx-linux

Files

T

David Howells 5494bd6a50 [PATCH] Keys: Fix oops when adding key to non-keyring [CVE-2006-1522]

This fixes the problem of an oops occuring when a user attempts to add a
key to a non-keyring key [CVE-2006-1522].

The problem is that __keyring_search_one() doesn't check that the
keyring it's been given is actually a keyring.

I've fixed this problem by:

 (1) declaring that caller of __keyring_search_one() must guarantee that
     the keyring is a keyring; and

 (2) making key_create_or_update() check that the keyring is a keyring,
     and return -ENOTDIR if it isn't.

This can be tested by:

	keyctl add user b b `keyctl add user a a @s`

Signed-off-by: David Howells <dhowells@redhat.com>
Signed-off-by: Linus Torvalds <torvalds@osdl.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>

2006-04-10 21:48:21 -07:00

compat.c

[PATCH] keys: Permit running process to instantiate keys

2006-01-08 20:13:53 -08:00

internal.h

[PATCH] keys: Permit running process to instantiate keys

2006-01-08 20:13:53 -08:00

key.c

[PATCH] Keys: Fix oops when adding key to non-keyring [CVE-2006-1522]

2006-04-10 21:48:21 -07:00

keyctl.c

[PATCH] Fix keyctl usage of strnlen_user()