Re: [PATCH] split security_key_alloc into two functions

Serge E. Hallyn <serue@xxxxxxxxxx> wrote:

The security_key_alloc() function acted as both an authorizer and
security structure allocation function. These roles should be
separated. There are two reasons for this.

Your patch is part of what I had originally, but this was mildly objected to
because SE Linux didn't care, so I dropped the post function for later
resurrection. See the email thread rooted on:

| From: David Howells <dhowells@xxxxxxxxxx>
| To: torvalds@xxxxxxxx, akpm@xxxxxxxx
| Date: Wed, 05 Oct 2005 17:28:34 +0100
| Cc: keyrings@xxxxxxxxxxxxx, linux-kernel@xxxxxxxxxxxxxxx
| Subject: [Keyrings] [PATCH] Keys: Add LSM hooks for key management

in which I included key_post_alloc():

/* publish the key by giving it a serial number */
atomic_inc(&user->nkeys);
key_alloc_serial(key);

- error:
+ /* let the security module know the key has been published */
+ security_key_post_alloc(key);
+
+error:

I'm happy with this patch, though I'd like the comment you can see in the
above snippet to be added back into key.c too.

Note also that by the time the post function is called, it's a little late to
be authorising creation of the key since the key has been published by that
point.

Acked-By: David Howells <dhowells@xxxxxxxxxx>
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/

Relevant Pages