Files
android_kernel_xiaomi_sm8450/include/uapi/linux
David Howells b206f281d0 keys: Namespace keyring names
Keyring names are held in a single global list that any process can pick
from by means of keyctl_join_session_keyring (provided the keyring grants
Search permission).  This isn't very container friendly, however.

Make the following changes:

 (1) Make default session, process and thread keyring names begin with a
     '.' instead of '_'.

 (2) Keyrings whose names begin with a '.' aren't added to the list.  Such
     keyrings are system specials.

 (3) Replace the global list with per-user_namespace lists.  A keyring adds
     its name to the list for the user_namespace that it is currently in.

 (4) When a user_namespace is deleted, it just removes itself from the
     keyring name list.

The global keyring_name_lock is retained for accessing the name lists.
This allows (4) to work.

This can be tested by:

	# keyctl newring foo @s
	995906392
	# unshare -U
	$ keyctl show
	...
	 995906392 --alswrv  65534 65534   \_ keyring: foo
	...
	$ keyctl session foo
	Joined session keyring: 935622349

As can be seen, a new session keyring was created.

The capability bit KEYCTL_CAPS1_NS_KEYRING_NAME is set if the kernel is
employing this feature.

Signed-off-by: David Howells <dhowells@redhat.com>
cc: Eric W. Biederman <ebiederm@xmission.com>
2019-06-26 21:02:32 +01:00
..
2019-01-28 08:13:52 +01:00
2019-04-24 09:46:34 -04:00
2019-04-15 18:14:01 -04:00
2019-03-07 18:32:01 -08:00
2019-01-24 11:11:42 -07:00
2019-02-14 11:51:51 -05:00
2018-12-20 19:13:07 +01:00
2019-03-27 13:30:07 -07:00
2018-06-18 15:11:53 +10:00
2018-09-13 10:46:24 +02:00
2018-09-05 22:27:11 -07:00
2018-07-07 17:41:38 +02:00
2019-06-26 21:02:32 +01:00
2018-08-03 10:03:57 -07:00
2017-11-28 16:54:00 +01:00
2018-12-19 09:40:13 +01:00
2018-04-11 10:28:37 -07:00
2018-12-16 12:15:25 -08:00
2018-12-01 12:38:32 +01:00
2018-01-14 23:06:30 -05:00
2018-01-16 16:47:29 +01:00
2019-05-13 18:34:48 -05:00
2019-01-22 10:21:45 +01:00
2018-03-20 03:17:41 +02:00
2018-04-14 11:59:31 -04:00
2017-11-24 10:18:41 +00:00
2019-05-07 14:31:03 +02:00
2017-11-16 10:49:00 +09:00
2018-04-11 10:28:37 -07:00
2019-03-23 21:50:05 -04:00
2019-02-14 11:51:51 -05:00
2018-09-03 13:29:38 +02:00
2018-02-06 18:32:44 -08:00
2016-12-16 00:13:32 +02:00