KEYS: Alter use of key instantiation link-to-keyring argument
Alter the use of the key instantiation and negation functions' link-to-keyring arguments. Currently this specifies a keyring in the target process to link the key into, creating the keyring if it doesn't exist. This, however, can be a problem for copy-on-write credentials as it means that the instantiating process can alter the credentials of the requesting process. This patch alters the behaviour such that: (1) If keyctl_instantiate_key() or keyctl_negate_key() are given a specific keyring by ID (ringid >= 0), then that keyring will be used. (2) If keyctl_instantiate_key() or keyctl_negate_key() are given one of the special constants that refer to the requesting process's keyrings (KEY_SPEC_*_KEYRING, all <= 0), then: (a) If sys_request_key() was given a keyring to use (destringid) then the key will be attached to that keyring. (b) If sys_request_key() was given a NULL keyring, then the key being instantiated will be attached to the default keyring as set by keyctl_set_reqkey_keyring(). (3) No extra link will be made. Decision point (1) follows current behaviour, and allows those instantiators who've searched for a specifically named keyring in the requestor's keyring so as to partition the keys by type to still have their named keyrings. Decision point (2) allows the requestor to make sure that the key or keys that get produced by request_key() go where they want, whilst allowing the instantiator to request that the key is retained. This is mainly useful for situations where the instantiator makes a secondary request, the key for which should be retained by the initial requestor: +-----------+ +--------------+ +--------------+ | | | | | | | Requestor |------->| Instantiator |------->| Instantiator | | | | | | | +-----------+ +--------------+ +--------------+ request_key() request_key() This might be useful, for example, in Kerberos, where the requestor requests a ticket, and then the ticket instantiator requests the TGT, which someone else then has to go and fetch. The TGT, however, should be retained in the keyrings of the requestor, not the first instantiator. To make this explict an extra special keyring constant is also added. Signed-off-by: David Howells <dhowells@redhat.com> Reviewed-by: James Morris <jmorris@namei.org> Signed-off-by: James Morris <jmorris@namei.org>
This commit is contained in:
parent
e9e349b051
commit
8bbf4976b5
|
@ -287,11 +287,11 @@ extern void key_fsuid_changed(struct task_struct *tsk);
|
||||||
extern void key_fsgid_changed(struct task_struct *tsk);
|
extern void key_fsgid_changed(struct task_struct *tsk);
|
||||||
extern void key_init(void);
|
extern void key_init(void);
|
||||||
|
|
||||||
#define __install_session_keyring(tsk, keyring) \
|
#define __install_session_keyring(keyring) \
|
||||||
({ \
|
({ \
|
||||||
struct key *old_session = tsk->signal->session_keyring; \
|
struct key *old_session = current->signal->session_keyring; \
|
||||||
tsk->signal->session_keyring = keyring; \
|
current->signal->session_keyring = keyring; \
|
||||||
old_session; \
|
old_session; \
|
||||||
})
|
})
|
||||||
|
|
||||||
#else /* CONFIG_KEYS */
|
#else /* CONFIG_KEYS */
|
||||||
|
@ -302,11 +302,11 @@ extern void key_init(void);
|
||||||
#define key_revoke(k) do { } while(0)
|
#define key_revoke(k) do { } while(0)
|
||||||
#define key_put(k) do { } while(0)
|
#define key_put(k) do { } while(0)
|
||||||
#define key_ref_put(k) do { } while(0)
|
#define key_ref_put(k) do { } while(0)
|
||||||
#define make_key_ref(k, p) ({ NULL; })
|
#define make_key_ref(k, p) NULL
|
||||||
#define key_ref_to_ptr(k) ({ NULL; })
|
#define key_ref_to_ptr(k) NULL
|
||||||
#define is_key_possessed(k) 0
|
#define is_key_possessed(k) 0
|
||||||
#define switch_uid_keyring(u) do { } while(0)
|
#define switch_uid_keyring(u) do { } while(0)
|
||||||
#define __install_session_keyring(t, k) ({ NULL; })
|
#define __install_session_keyring(k) ({ NULL; })
|
||||||
#define copy_keys(f,t) 0
|
#define copy_keys(f,t) 0
|
||||||
#define copy_thread_group_keys(t) 0
|
#define copy_thread_group_keys(t) 0
|
||||||
#define exit_keys(t) do { } while(0)
|
#define exit_keys(t) do { } while(0)
|
||||||
|
|
|
@ -1,6 +1,6 @@
|
||||||
/* keyctl.h: keyctl command IDs
|
/* keyctl.h: keyctl command IDs
|
||||||
*
|
*
|
||||||
* Copyright (C) 2004 Red Hat, Inc. All Rights Reserved.
|
* Copyright (C) 2004, 2008 Red Hat, Inc. All Rights Reserved.
|
||||||
* Written by David Howells (dhowells@redhat.com)
|
* Written by David Howells (dhowells@redhat.com)
|
||||||
*
|
*
|
||||||
* This program is free software; you can redistribute it and/or
|
* This program is free software; you can redistribute it and/or
|
||||||
|
@ -20,6 +20,7 @@
|
||||||
#define KEY_SPEC_USER_SESSION_KEYRING -5 /* - key ID for UID-session keyring */
|
#define KEY_SPEC_USER_SESSION_KEYRING -5 /* - key ID for UID-session keyring */
|
||||||
#define KEY_SPEC_GROUP_KEYRING -6 /* - key ID for GID-specific keyring */
|
#define KEY_SPEC_GROUP_KEYRING -6 /* - key ID for GID-specific keyring */
|
||||||
#define KEY_SPEC_REQKEY_AUTH_KEY -7 /* - key ID for assumed request_key auth key */
|
#define KEY_SPEC_REQKEY_AUTH_KEY -7 /* - key ID for assumed request_key auth key */
|
||||||
|
#define KEY_SPEC_REQUESTOR_KEYRING -8 /* - key ID for request_key() dest keyring */
|
||||||
|
|
||||||
/* request-key default keyrings */
|
/* request-key default keyrings */
|
||||||
#define KEY_REQKEY_DEFL_NO_CHANGE -1
|
#define KEY_REQKEY_DEFL_NO_CHANGE -1
|
||||||
|
@ -30,6 +31,7 @@
|
||||||
#define KEY_REQKEY_DEFL_USER_KEYRING 4
|
#define KEY_REQKEY_DEFL_USER_KEYRING 4
|
||||||
#define KEY_REQKEY_DEFL_USER_SESSION_KEYRING 5
|
#define KEY_REQKEY_DEFL_USER_SESSION_KEYRING 5
|
||||||
#define KEY_REQKEY_DEFL_GROUP_KEYRING 6
|
#define KEY_REQKEY_DEFL_GROUP_KEYRING 6
|
||||||
|
#define KEY_REQKEY_DEFL_REQUESTOR_KEYRING 7
|
||||||
|
|
||||||
/* keyctl commands */
|
/* keyctl commands */
|
||||||
#define KEYCTL_GET_KEYRING_ID 0 /* ask for a keyring's ID */
|
#define KEYCTL_GET_KEYRING_ID 0 /* ask for a keyring's ID */
|
||||||
|
|
|
@ -140,7 +140,7 @@ static int ____call_usermodehelper(void *data)
|
||||||
/* Unblock all signals and set the session keyring. */
|
/* Unblock all signals and set the session keyring. */
|
||||||
new_session = key_get(sub_info->ring);
|
new_session = key_get(sub_info->ring);
|
||||||
spin_lock_irq(¤t->sighand->siglock);
|
spin_lock_irq(¤t->sighand->siglock);
|
||||||
old_session = __install_session_keyring(current, new_session);
|
old_session = __install_session_keyring(new_session);
|
||||||
flush_signal_handlers(current, 1);
|
flush_signal_handlers(current, 1);
|
||||||
sigemptyset(¤t->blocked);
|
sigemptyset(¤t->blocked);
|
||||||
recalc_sigpending();
|
recalc_sigpending();
|
||||||
|
|
|
@ -109,8 +109,9 @@ extern key_ref_t search_process_keyrings(struct key_type *type,
|
||||||
|
|
||||||
extern struct key *find_keyring_by_name(const char *name, bool skip_perm_check);
|
extern struct key *find_keyring_by_name(const char *name, bool skip_perm_check);
|
||||||
|
|
||||||
extern int install_thread_keyring(struct task_struct *tsk);
|
extern int install_user_keyrings(void);
|
||||||
extern int install_process_keyring(struct task_struct *tsk);
|
extern int install_thread_keyring(void);
|
||||||
|
extern int install_process_keyring(void);
|
||||||
|
|
||||||
extern struct key *request_key_and_link(struct key_type *type,
|
extern struct key *request_key_and_link(struct key_type *type,
|
||||||
const char *description,
|
const char *description,
|
||||||
|
@ -120,8 +121,7 @@ extern struct key *request_key_and_link(struct key_type *type,
|
||||||
struct key *dest_keyring,
|
struct key *dest_keyring,
|
||||||
unsigned long flags);
|
unsigned long flags);
|
||||||
|
|
||||||
extern key_ref_t lookup_user_key(struct task_struct *context,
|
extern key_ref_t lookup_user_key(key_serial_t id, int create, int partial,
|
||||||
key_serial_t id, int create, int partial,
|
|
||||||
key_perm_t perm);
|
key_perm_t perm);
|
||||||
|
|
||||||
extern long join_session_keyring(const char *name);
|
extern long join_session_keyring(const char *name);
|
||||||
|
@ -152,6 +152,7 @@ static inline int key_permission(const key_ref_t key_ref, key_perm_t perm)
|
||||||
*/
|
*/
|
||||||
struct request_key_auth {
|
struct request_key_auth {
|
||||||
struct key *target_key;
|
struct key *target_key;
|
||||||
|
struct key *dest_keyring;
|
||||||
struct task_struct *context;
|
struct task_struct *context;
|
||||||
void *callout_info;
|
void *callout_info;
|
||||||
size_t callout_len;
|
size_t callout_len;
|
||||||
|
@ -161,7 +162,8 @@ struct request_key_auth {
|
||||||
extern struct key_type key_type_request_key_auth;
|
extern struct key_type key_type_request_key_auth;
|
||||||
extern struct key *request_key_auth_new(struct key *target,
|
extern struct key *request_key_auth_new(struct key *target,
|
||||||
const void *callout_info,
|
const void *callout_info,
|
||||||
size_t callout_len);
|
size_t callout_len,
|
||||||
|
struct key *dest_keyring);
|
||||||
|
|
||||||
extern struct key *key_get_instantiation_authkey(key_serial_t target_id);
|
extern struct key *key_get_instantiation_authkey(key_serial_t target_id);
|
||||||
|
|
||||||
|
|
|
@ -103,7 +103,7 @@ asmlinkage long sys_add_key(const char __user *_type,
|
||||||
}
|
}
|
||||||
|
|
||||||
/* find the target keyring (which must be writable) */
|
/* find the target keyring (which must be writable) */
|
||||||
keyring_ref = lookup_user_key(NULL, ringid, 1, 0, KEY_WRITE);
|
keyring_ref = lookup_user_key(ringid, 1, 0, KEY_WRITE);
|
||||||
if (IS_ERR(keyring_ref)) {
|
if (IS_ERR(keyring_ref)) {
|
||||||
ret = PTR_ERR(keyring_ref);
|
ret = PTR_ERR(keyring_ref);
|
||||||
goto error3;
|
goto error3;
|
||||||
|
@ -185,7 +185,7 @@ asmlinkage long sys_request_key(const char __user *_type,
|
||||||
/* get the destination keyring if specified */
|
/* get the destination keyring if specified */
|
||||||
dest_ref = NULL;
|
dest_ref = NULL;
|
||||||
if (destringid) {
|
if (destringid) {
|
||||||
dest_ref = lookup_user_key(NULL, destringid, 1, 0, KEY_WRITE);
|
dest_ref = lookup_user_key(destringid, 1, 0, KEY_WRITE);
|
||||||
if (IS_ERR(dest_ref)) {
|
if (IS_ERR(dest_ref)) {
|
||||||
ret = PTR_ERR(dest_ref);
|
ret = PTR_ERR(dest_ref);
|
||||||
goto error3;
|
goto error3;
|
||||||
|
@ -235,7 +235,7 @@ long keyctl_get_keyring_ID(key_serial_t id, int create)
|
||||||
key_ref_t key_ref;
|
key_ref_t key_ref;
|
||||||
long ret;
|
long ret;
|
||||||
|
|
||||||
key_ref = lookup_user_key(NULL, id, create, 0, KEY_SEARCH);
|
key_ref = lookup_user_key(id, create, 0, KEY_SEARCH);
|
||||||
if (IS_ERR(key_ref)) {
|
if (IS_ERR(key_ref)) {
|
||||||
ret = PTR_ERR(key_ref);
|
ret = PTR_ERR(key_ref);
|
||||||
goto error;
|
goto error;
|
||||||
|
@ -308,7 +308,7 @@ long keyctl_update_key(key_serial_t id,
|
||||||
}
|
}
|
||||||
|
|
||||||
/* find the target key (which must be writable) */
|
/* find the target key (which must be writable) */
|
||||||
key_ref = lookup_user_key(NULL, id, 0, 0, KEY_WRITE);
|
key_ref = lookup_user_key(id, 0, 0, KEY_WRITE);
|
||||||
if (IS_ERR(key_ref)) {
|
if (IS_ERR(key_ref)) {
|
||||||
ret = PTR_ERR(key_ref);
|
ret = PTR_ERR(key_ref);
|
||||||
goto error2;
|
goto error2;
|
||||||
|
@ -336,7 +336,7 @@ long keyctl_revoke_key(key_serial_t id)
|
||||||
key_ref_t key_ref;
|
key_ref_t key_ref;
|
||||||
long ret;
|
long ret;
|
||||||
|
|
||||||
key_ref = lookup_user_key(NULL, id, 0, 0, KEY_WRITE);
|
key_ref = lookup_user_key(id, 0, 0, KEY_WRITE);
|
||||||
if (IS_ERR(key_ref)) {
|
if (IS_ERR(key_ref)) {
|
||||||
ret = PTR_ERR(key_ref);
|
ret = PTR_ERR(key_ref);
|
||||||
goto error;
|
goto error;
|
||||||
|
@ -362,7 +362,7 @@ long keyctl_keyring_clear(key_serial_t ringid)
|
||||||
key_ref_t keyring_ref;
|
key_ref_t keyring_ref;
|
||||||
long ret;
|
long ret;
|
||||||
|
|
||||||
keyring_ref = lookup_user_key(NULL, ringid, 1, 0, KEY_WRITE);
|
keyring_ref = lookup_user_key(ringid, 1, 0, KEY_WRITE);
|
||||||
if (IS_ERR(keyring_ref)) {
|
if (IS_ERR(keyring_ref)) {
|
||||||
ret = PTR_ERR(keyring_ref);
|
ret = PTR_ERR(keyring_ref);
|
||||||
goto error;
|
goto error;
|
||||||
|
@ -388,13 +388,13 @@ long keyctl_keyring_link(key_serial_t id, key_serial_t ringid)
|
||||||
key_ref_t keyring_ref, key_ref;
|
key_ref_t keyring_ref, key_ref;
|
||||||
long ret;
|
long ret;
|
||||||
|
|
||||||
keyring_ref = lookup_user_key(NULL, ringid, 1, 0, KEY_WRITE);
|
keyring_ref = lookup_user_key(ringid, 1, 0, KEY_WRITE);
|
||||||
if (IS_ERR(keyring_ref)) {
|
if (IS_ERR(keyring_ref)) {
|
||||||
ret = PTR_ERR(keyring_ref);
|
ret = PTR_ERR(keyring_ref);
|
||||||
goto error;
|
goto error;
|
||||||
}
|
}
|
||||||
|
|
||||||
key_ref = lookup_user_key(NULL, id, 1, 0, KEY_LINK);
|
key_ref = lookup_user_key(id, 1, 0, KEY_LINK);
|
||||||
if (IS_ERR(key_ref)) {
|
if (IS_ERR(key_ref)) {
|
||||||
ret = PTR_ERR(key_ref);
|
ret = PTR_ERR(key_ref);
|
||||||
goto error2;
|
goto error2;
|
||||||
|
@ -422,13 +422,13 @@ long keyctl_keyring_unlink(key_serial_t id, key_serial_t ringid)
|
||||||
key_ref_t keyring_ref, key_ref;
|
key_ref_t keyring_ref, key_ref;
|
||||||
long ret;
|
long ret;
|
||||||
|
|
||||||
keyring_ref = lookup_user_key(NULL, ringid, 0, 0, KEY_WRITE);
|
keyring_ref = lookup_user_key(ringid, 0, 0, KEY_WRITE);
|
||||||
if (IS_ERR(keyring_ref)) {
|
if (IS_ERR(keyring_ref)) {
|
||||||
ret = PTR_ERR(keyring_ref);
|
ret = PTR_ERR(keyring_ref);
|
||||||
goto error;
|
goto error;
|
||||||
}
|
}
|
||||||
|
|
||||||
key_ref = lookup_user_key(NULL, id, 0, 0, 0);
|
key_ref = lookup_user_key(id, 0, 0, 0);
|
||||||
if (IS_ERR(key_ref)) {
|
if (IS_ERR(key_ref)) {
|
||||||
ret = PTR_ERR(key_ref);
|
ret = PTR_ERR(key_ref);
|
||||||
goto error2;
|
goto error2;
|
||||||
|
@ -464,7 +464,7 @@ long keyctl_describe_key(key_serial_t keyid,
|
||||||
char *tmpbuf;
|
char *tmpbuf;
|
||||||
long ret;
|
long ret;
|
||||||
|
|
||||||
key_ref = lookup_user_key(NULL, keyid, 0, 1, KEY_VIEW);
|
key_ref = lookup_user_key(keyid, 0, 1, KEY_VIEW);
|
||||||
if (IS_ERR(key_ref)) {
|
if (IS_ERR(key_ref)) {
|
||||||
/* viewing a key under construction is permitted if we have the
|
/* viewing a key under construction is permitted if we have the
|
||||||
* authorisation token handy */
|
* authorisation token handy */
|
||||||
|
@ -472,7 +472,7 @@ long keyctl_describe_key(key_serial_t keyid,
|
||||||
instkey = key_get_instantiation_authkey(keyid);
|
instkey = key_get_instantiation_authkey(keyid);
|
||||||
if (!IS_ERR(instkey)) {
|
if (!IS_ERR(instkey)) {
|
||||||
key_put(instkey);
|
key_put(instkey);
|
||||||
key_ref = lookup_user_key(NULL, keyid,
|
key_ref = lookup_user_key(keyid,
|
||||||
0, 1, 0);
|
0, 1, 0);
|
||||||
if (!IS_ERR(key_ref))
|
if (!IS_ERR(key_ref))
|
||||||
goto okay;
|
goto okay;
|
||||||
|
@ -557,7 +557,7 @@ long keyctl_keyring_search(key_serial_t ringid,
|
||||||
}
|
}
|
||||||
|
|
||||||
/* get the keyring at which to begin the search */
|
/* get the keyring at which to begin the search */
|
||||||
keyring_ref = lookup_user_key(NULL, ringid, 0, 0, KEY_SEARCH);
|
keyring_ref = lookup_user_key(ringid, 0, 0, KEY_SEARCH);
|
||||||
if (IS_ERR(keyring_ref)) {
|
if (IS_ERR(keyring_ref)) {
|
||||||
ret = PTR_ERR(keyring_ref);
|
ret = PTR_ERR(keyring_ref);
|
||||||
goto error2;
|
goto error2;
|
||||||
|
@ -566,7 +566,7 @@ long keyctl_keyring_search(key_serial_t ringid,
|
||||||
/* get the destination keyring if specified */
|
/* get the destination keyring if specified */
|
||||||
dest_ref = NULL;
|
dest_ref = NULL;
|
||||||
if (destringid) {
|
if (destringid) {
|
||||||
dest_ref = lookup_user_key(NULL, destringid, 1, 0, KEY_WRITE);
|
dest_ref = lookup_user_key(destringid, 1, 0, KEY_WRITE);
|
||||||
if (IS_ERR(dest_ref)) {
|
if (IS_ERR(dest_ref)) {
|
||||||
ret = PTR_ERR(dest_ref);
|
ret = PTR_ERR(dest_ref);
|
||||||
goto error3;
|
goto error3;
|
||||||
|
@ -636,7 +636,7 @@ long keyctl_read_key(key_serial_t keyid, char __user *buffer, size_t buflen)
|
||||||
long ret;
|
long ret;
|
||||||
|
|
||||||
/* find the key first */
|
/* find the key first */
|
||||||
key_ref = lookup_user_key(NULL, keyid, 0, 0, 0);
|
key_ref = lookup_user_key(keyid, 0, 0, 0);
|
||||||
if (IS_ERR(key_ref)) {
|
if (IS_ERR(key_ref)) {
|
||||||
ret = -ENOKEY;
|
ret = -ENOKEY;
|
||||||
goto error;
|
goto error;
|
||||||
|
@ -699,7 +699,7 @@ long keyctl_chown_key(key_serial_t id, uid_t uid, gid_t gid)
|
||||||
if (uid == (uid_t) -1 && gid == (gid_t) -1)
|
if (uid == (uid_t) -1 && gid == (gid_t) -1)
|
||||||
goto error;
|
goto error;
|
||||||
|
|
||||||
key_ref = lookup_user_key(NULL, id, 1, 1, KEY_SETATTR);
|
key_ref = lookup_user_key(id, 1, 1, KEY_SETATTR);
|
||||||
if (IS_ERR(key_ref)) {
|
if (IS_ERR(key_ref)) {
|
||||||
ret = PTR_ERR(key_ref);
|
ret = PTR_ERR(key_ref);
|
||||||
goto error;
|
goto error;
|
||||||
|
@ -804,7 +804,7 @@ long keyctl_setperm_key(key_serial_t id, key_perm_t perm)
|
||||||
if (perm & ~(KEY_POS_ALL | KEY_USR_ALL | KEY_GRP_ALL | KEY_OTH_ALL))
|
if (perm & ~(KEY_POS_ALL | KEY_USR_ALL | KEY_GRP_ALL | KEY_OTH_ALL))
|
||||||
goto error;
|
goto error;
|
||||||
|
|
||||||
key_ref = lookup_user_key(NULL, id, 1, 1, KEY_SETATTR);
|
key_ref = lookup_user_key(id, 1, 1, KEY_SETATTR);
|
||||||
if (IS_ERR(key_ref)) {
|
if (IS_ERR(key_ref)) {
|
||||||
ret = PTR_ERR(key_ref);
|
ret = PTR_ERR(key_ref);
|
||||||
goto error;
|
goto error;
|
||||||
|
@ -829,6 +829,43 @@ error:
|
||||||
|
|
||||||
} /* end keyctl_setperm_key() */
|
} /* end keyctl_setperm_key() */
|
||||||
|
|
||||||
|
/*
|
||||||
|
* get the destination keyring for instantiation
|
||||||
|
*/
|
||||||
|
static long get_instantiation_keyring(key_serial_t ringid,
|
||||||
|
struct request_key_auth *rka,
|
||||||
|
struct key **_dest_keyring)
|
||||||
|
{
|
||||||
|
key_ref_t dkref;
|
||||||
|
|
||||||
|
/* just return a NULL pointer if we weren't asked to make a link */
|
||||||
|
if (ringid == 0) {
|
||||||
|
*_dest_keyring = NULL;
|
||||||
|
return 0;
|
||||||
|
}
|
||||||
|
|
||||||
|
/* if a specific keyring is nominated by ID, then use that */
|
||||||
|
if (ringid > 0) {
|
||||||
|
dkref = lookup_user_key(ringid, 1, 0, KEY_WRITE);
|
||||||
|
if (IS_ERR(dkref))
|
||||||
|
return PTR_ERR(dkref);
|
||||||
|
*_dest_keyring = key_ref_to_ptr(dkref);
|
||||||
|
return 0;
|
||||||
|
}
|
||||||
|
|
||||||
|
if (ringid == KEY_SPEC_REQKEY_AUTH_KEY)
|
||||||
|
return -EINVAL;
|
||||||
|
|
||||||
|
/* otherwise specify the destination keyring recorded in the
|
||||||
|
* authorisation key (any KEY_SPEC_*_KEYRING) */
|
||||||
|
if (ringid >= KEY_SPEC_REQUESTOR_KEYRING) {
|
||||||
|
*_dest_keyring = rka->dest_keyring;
|
||||||
|
return 0;
|
||||||
|
}
|
||||||
|
|
||||||
|
return -ENOKEY;
|
||||||
|
}
|
||||||
|
|
||||||
/*****************************************************************************/
|
/*****************************************************************************/
|
||||||
/*
|
/*
|
||||||
* instantiate the key with the specified payload, and, if one is given, link
|
* instantiate the key with the specified payload, and, if one is given, link
|
||||||
|
@ -840,8 +877,7 @@ long keyctl_instantiate_key(key_serial_t id,
|
||||||
key_serial_t ringid)
|
key_serial_t ringid)
|
||||||
{
|
{
|
||||||
struct request_key_auth *rka;
|
struct request_key_auth *rka;
|
||||||
struct key *instkey;
|
struct key *instkey, *dest_keyring;
|
||||||
key_ref_t keyring_ref;
|
|
||||||
void *payload;
|
void *payload;
|
||||||
long ret;
|
long ret;
|
||||||
bool vm = false;
|
bool vm = false;
|
||||||
|
@ -883,21 +919,15 @@ long keyctl_instantiate_key(key_serial_t id,
|
||||||
|
|
||||||
/* find the destination keyring amongst those belonging to the
|
/* find the destination keyring amongst those belonging to the
|
||||||
* requesting task */
|
* requesting task */
|
||||||
keyring_ref = NULL;
|
ret = get_instantiation_keyring(ringid, rka, &dest_keyring);
|
||||||
if (ringid) {
|
if (ret < 0)
|
||||||
keyring_ref = lookup_user_key(rka->context, ringid, 1, 0,
|
goto error2;
|
||||||
KEY_WRITE);
|
|
||||||
if (IS_ERR(keyring_ref)) {
|
|
||||||
ret = PTR_ERR(keyring_ref);
|
|
||||||
goto error2;
|
|
||||||
}
|
|
||||||
}
|
|
||||||
|
|
||||||
/* instantiate the key and link it into a keyring */
|
/* instantiate the key and link it into a keyring */
|
||||||
ret = key_instantiate_and_link(rka->target_key, payload, plen,
|
ret = key_instantiate_and_link(rka->target_key, payload, plen,
|
||||||
key_ref_to_ptr(keyring_ref), instkey);
|
dest_keyring, instkey);
|
||||||
|
|
||||||
key_ref_put(keyring_ref);
|
key_put(dest_keyring);
|
||||||
|
|
||||||
/* discard the assumed authority if it's just been disabled by
|
/* discard the assumed authority if it's just been disabled by
|
||||||
* instantiation of the key */
|
* instantiation of the key */
|
||||||
|
@ -924,8 +954,7 @@ error:
|
||||||
long keyctl_negate_key(key_serial_t id, unsigned timeout, key_serial_t ringid)
|
long keyctl_negate_key(key_serial_t id, unsigned timeout, key_serial_t ringid)
|
||||||
{
|
{
|
||||||
struct request_key_auth *rka;
|
struct request_key_auth *rka;
|
||||||
struct key *instkey;
|
struct key *instkey, *dest_keyring;
|
||||||
key_ref_t keyring_ref;
|
|
||||||
long ret;
|
long ret;
|
||||||
|
|
||||||
/* the appropriate instantiation authorisation key must have been
|
/* the appropriate instantiation authorisation key must have been
|
||||||
|
@ -941,20 +970,15 @@ long keyctl_negate_key(key_serial_t id, unsigned timeout, key_serial_t ringid)
|
||||||
|
|
||||||
/* find the destination keyring if present (which must also be
|
/* find the destination keyring if present (which must also be
|
||||||
* writable) */
|
* writable) */
|
||||||
keyring_ref = NULL;
|
ret = get_instantiation_keyring(ringid, rka, &dest_keyring);
|
||||||
if (ringid) {
|
if (ret < 0)
|
||||||
keyring_ref = lookup_user_key(NULL, ringid, 1, 0, KEY_WRITE);
|
goto error;
|
||||||
if (IS_ERR(keyring_ref)) {
|
|
||||||
ret = PTR_ERR(keyring_ref);
|
|
||||||
goto error;
|
|
||||||
}
|
|
||||||
}
|
|
||||||
|
|
||||||
/* instantiate the key and link it into a keyring */
|
/* instantiate the key and link it into a keyring */
|
||||||
ret = key_negate_and_link(rka->target_key, timeout,
|
ret = key_negate_and_link(rka->target_key, timeout,
|
||||||
key_ref_to_ptr(keyring_ref), instkey);
|
dest_keyring, instkey);
|
||||||
|
|
||||||
key_ref_put(keyring_ref);
|
key_put(dest_keyring);
|
||||||
|
|
||||||
/* discard the assumed authority if it's just been disabled by
|
/* discard the assumed authority if it's just been disabled by
|
||||||
* instantiation of the key */
|
* instantiation of the key */
|
||||||
|
@ -979,13 +1003,13 @@ long keyctl_set_reqkey_keyring(int reqkey_defl)
|
||||||
|
|
||||||
switch (reqkey_defl) {
|
switch (reqkey_defl) {
|
||||||
case KEY_REQKEY_DEFL_THREAD_KEYRING:
|
case KEY_REQKEY_DEFL_THREAD_KEYRING:
|
||||||
ret = install_thread_keyring(current);
|
ret = install_thread_keyring();
|
||||||
if (ret < 0)
|
if (ret < 0)
|
||||||
return ret;
|
return ret;
|
||||||
goto set;
|
goto set;
|
||||||
|
|
||||||
case KEY_REQKEY_DEFL_PROCESS_KEYRING:
|
case KEY_REQKEY_DEFL_PROCESS_KEYRING:
|
||||||
ret = install_process_keyring(current);
|
ret = install_process_keyring();
|
||||||
if (ret < 0)
|
if (ret < 0)
|
||||||
return ret;
|
return ret;
|
||||||
|
|
||||||
|
@ -1018,7 +1042,7 @@ long keyctl_set_timeout(key_serial_t id, unsigned timeout)
|
||||||
time_t expiry;
|
time_t expiry;
|
||||||
long ret;
|
long ret;
|
||||||
|
|
||||||
key_ref = lookup_user_key(NULL, id, 1, 1, KEY_SETATTR);
|
key_ref = lookup_user_key(id, 1, 1, KEY_SETATTR);
|
||||||
if (IS_ERR(key_ref)) {
|
if (IS_ERR(key_ref)) {
|
||||||
ret = PTR_ERR(key_ref);
|
ret = PTR_ERR(key_ref);
|
||||||
goto error;
|
goto error;
|
||||||
|
@ -1105,7 +1129,7 @@ long keyctl_get_security(key_serial_t keyid,
|
||||||
char *context;
|
char *context;
|
||||||
long ret;
|
long ret;
|
||||||
|
|
||||||
key_ref = lookup_user_key(NULL, keyid, 0, 1, KEY_VIEW);
|
key_ref = lookup_user_key(keyid, 0, 1, KEY_VIEW);
|
||||||
if (IS_ERR(key_ref)) {
|
if (IS_ERR(key_ref)) {
|
||||||
if (PTR_ERR(key_ref) != -EACCES)
|
if (PTR_ERR(key_ref) != -EACCES)
|
||||||
return PTR_ERR(key_ref);
|
return PTR_ERR(key_ref);
|
||||||
|
@ -1117,7 +1141,7 @@ long keyctl_get_security(key_serial_t keyid,
|
||||||
return PTR_ERR(key_ref);
|
return PTR_ERR(key_ref);
|
||||||
key_put(instkey);
|
key_put(instkey);
|
||||||
|
|
||||||
key_ref = lookup_user_key(NULL, keyid, 0, 1, 0);
|
key_ref = lookup_user_key(keyid, 0, 1, 0);
|
||||||
if (IS_ERR(key_ref))
|
if (IS_ERR(key_ref))
|
||||||
return PTR_ERR(key_ref);
|
return PTR_ERR(key_ref);
|
||||||
}
|
}
|
||||||
|
|
|
@ -40,9 +40,9 @@ struct key_user root_key_user = {
|
||||||
/*
|
/*
|
||||||
* install user and user session keyrings for a particular UID
|
* install user and user session keyrings for a particular UID
|
||||||
*/
|
*/
|
||||||
static int install_user_keyrings(struct task_struct *tsk)
|
int install_user_keyrings(void)
|
||||||
{
|
{
|
||||||
struct user_struct *user = tsk->user;
|
struct user_struct *user = current->user;
|
||||||
struct key *uid_keyring, *session_keyring;
|
struct key *uid_keyring, *session_keyring;
|
||||||
char buf[20];
|
char buf[20];
|
||||||
int ret;
|
int ret;
|
||||||
|
@ -67,7 +67,7 @@ static int install_user_keyrings(struct task_struct *tsk)
|
||||||
uid_keyring = find_keyring_by_name(buf, true);
|
uid_keyring = find_keyring_by_name(buf, true);
|
||||||
if (IS_ERR(uid_keyring)) {
|
if (IS_ERR(uid_keyring)) {
|
||||||
uid_keyring = keyring_alloc(buf, user->uid, (gid_t) -1,
|
uid_keyring = keyring_alloc(buf, user->uid, (gid_t) -1,
|
||||||
tsk, KEY_ALLOC_IN_QUOTA,
|
current, KEY_ALLOC_IN_QUOTA,
|
||||||
NULL);
|
NULL);
|
||||||
if (IS_ERR(uid_keyring)) {
|
if (IS_ERR(uid_keyring)) {
|
||||||
ret = PTR_ERR(uid_keyring);
|
ret = PTR_ERR(uid_keyring);
|
||||||
|
@ -83,7 +83,8 @@ static int install_user_keyrings(struct task_struct *tsk)
|
||||||
if (IS_ERR(session_keyring)) {
|
if (IS_ERR(session_keyring)) {
|
||||||
session_keyring =
|
session_keyring =
|
||||||
keyring_alloc(buf, user->uid, (gid_t) -1,
|
keyring_alloc(buf, user->uid, (gid_t) -1,
|
||||||
tsk, KEY_ALLOC_IN_QUOTA, NULL);
|
current, KEY_ALLOC_IN_QUOTA,
|
||||||
|
NULL);
|
||||||
if (IS_ERR(session_keyring)) {
|
if (IS_ERR(session_keyring)) {
|
||||||
ret = PTR_ERR(session_keyring);
|
ret = PTR_ERR(session_keyring);
|
||||||
goto error_release;
|
goto error_release;
|
||||||
|
@ -146,8 +147,9 @@ void switch_uid_keyring(struct user_struct *new_user)
|
||||||
/*
|
/*
|
||||||
* install a fresh thread keyring, discarding the old one
|
* install a fresh thread keyring, discarding the old one
|
||||||
*/
|
*/
|
||||||
int install_thread_keyring(struct task_struct *tsk)
|
int install_thread_keyring(void)
|
||||||
{
|
{
|
||||||
|
struct task_struct *tsk = current;
|
||||||
struct key *keyring, *old;
|
struct key *keyring, *old;
|
||||||
char buf[20];
|
char buf[20];
|
||||||
int ret;
|
int ret;
|
||||||
|
@ -178,8 +180,9 @@ error:
|
||||||
/*
|
/*
|
||||||
* make sure a process keyring is installed
|
* make sure a process keyring is installed
|
||||||
*/
|
*/
|
||||||
int install_process_keyring(struct task_struct *tsk)
|
int install_process_keyring(void)
|
||||||
{
|
{
|
||||||
|
struct task_struct *tsk = current;
|
||||||
struct key *keyring;
|
struct key *keyring;
|
||||||
char buf[20];
|
char buf[20];
|
||||||
int ret;
|
int ret;
|
||||||
|
@ -218,9 +221,9 @@ error:
|
||||||
* install a session keyring, discarding the old one
|
* install a session keyring, discarding the old one
|
||||||
* - if a keyring is not supplied, an empty one is invented
|
* - if a keyring is not supplied, an empty one is invented
|
||||||
*/
|
*/
|
||||||
static int install_session_keyring(struct task_struct *tsk,
|
static int install_session_keyring(struct key *keyring)
|
||||||
struct key *keyring)
|
|
||||||
{
|
{
|
||||||
|
struct task_struct *tsk = current;
|
||||||
unsigned long flags;
|
unsigned long flags;
|
||||||
struct key *old;
|
struct key *old;
|
||||||
char buf[20];
|
char buf[20];
|
||||||
|
@ -572,93 +575,91 @@ static int lookup_user_key_possessed(const struct key *key, const void *target)
|
||||||
* - don't create special keyrings unless so requested
|
* - don't create special keyrings unless so requested
|
||||||
* - partially constructed keys aren't found unless requested
|
* - partially constructed keys aren't found unless requested
|
||||||
*/
|
*/
|
||||||
key_ref_t lookup_user_key(struct task_struct *context, key_serial_t id,
|
key_ref_t lookup_user_key(key_serial_t id, int create, int partial,
|
||||||
int create, int partial, key_perm_t perm)
|
key_perm_t perm)
|
||||||
{
|
{
|
||||||
|
struct request_key_auth *rka;
|
||||||
|
struct task_struct *t = current;
|
||||||
key_ref_t key_ref, skey_ref;
|
key_ref_t key_ref, skey_ref;
|
||||||
struct key *key;
|
struct key *key;
|
||||||
int ret;
|
int ret;
|
||||||
|
|
||||||
if (!context)
|
|
||||||
context = current;
|
|
||||||
|
|
||||||
key_ref = ERR_PTR(-ENOKEY);
|
key_ref = ERR_PTR(-ENOKEY);
|
||||||
|
|
||||||
switch (id) {
|
switch (id) {
|
||||||
case KEY_SPEC_THREAD_KEYRING:
|
case KEY_SPEC_THREAD_KEYRING:
|
||||||
if (!context->thread_keyring) {
|
if (!t->thread_keyring) {
|
||||||
if (!create)
|
if (!create)
|
||||||
goto error;
|
goto error;
|
||||||
|
|
||||||
ret = install_thread_keyring(context);
|
ret = install_thread_keyring();
|
||||||
if (ret < 0) {
|
if (ret < 0) {
|
||||||
key = ERR_PTR(ret);
|
key = ERR_PTR(ret);
|
||||||
goto error;
|
goto error;
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
|
||||||
key = context->thread_keyring;
|
key = t->thread_keyring;
|
||||||
atomic_inc(&key->usage);
|
atomic_inc(&key->usage);
|
||||||
key_ref = make_key_ref(key, 1);
|
key_ref = make_key_ref(key, 1);
|
||||||
break;
|
break;
|
||||||
|
|
||||||
case KEY_SPEC_PROCESS_KEYRING:
|
case KEY_SPEC_PROCESS_KEYRING:
|
||||||
if (!context->signal->process_keyring) {
|
if (!t->signal->process_keyring) {
|
||||||
if (!create)
|
if (!create)
|
||||||
goto error;
|
goto error;
|
||||||
|
|
||||||
ret = install_process_keyring(context);
|
ret = install_process_keyring();
|
||||||
if (ret < 0) {
|
if (ret < 0) {
|
||||||
key = ERR_PTR(ret);
|
key = ERR_PTR(ret);
|
||||||
goto error;
|
goto error;
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
|
||||||
key = context->signal->process_keyring;
|
key = t->signal->process_keyring;
|
||||||
atomic_inc(&key->usage);
|
atomic_inc(&key->usage);
|
||||||
key_ref = make_key_ref(key, 1);
|
key_ref = make_key_ref(key, 1);
|
||||||
break;
|
break;
|
||||||
|
|
||||||
case KEY_SPEC_SESSION_KEYRING:
|
case KEY_SPEC_SESSION_KEYRING:
|
||||||
if (!context->signal->session_keyring) {
|
if (!t->signal->session_keyring) {
|
||||||
/* always install a session keyring upon access if one
|
/* always install a session keyring upon access if one
|
||||||
* doesn't exist yet */
|
* doesn't exist yet */
|
||||||
ret = install_user_keyrings(context);
|
ret = install_user_keyrings();
|
||||||
if (ret < 0)
|
if (ret < 0)
|
||||||
goto error;
|
goto error;
|
||||||
ret = install_session_keyring(
|
ret = install_session_keyring(t->user->session_keyring);
|
||||||
context, context->user->session_keyring);
|
|
||||||
if (ret < 0)
|
if (ret < 0)
|
||||||
goto error;
|
goto error;
|
||||||
}
|
}
|
||||||
|
|
||||||
rcu_read_lock();
|
rcu_read_lock();
|
||||||
key = rcu_dereference(context->signal->session_keyring);
|
key = rcu_dereference(t->signal->session_keyring);
|
||||||
atomic_inc(&key->usage);
|
atomic_inc(&key->usage);
|
||||||
rcu_read_unlock();
|
rcu_read_unlock();
|
||||||
key_ref = make_key_ref(key, 1);
|
key_ref = make_key_ref(key, 1);
|
||||||
break;
|
break;
|
||||||
|
|
||||||
case KEY_SPEC_USER_KEYRING:
|
case KEY_SPEC_USER_KEYRING:
|
||||||
if (!context->user->uid_keyring) {
|
if (!t->user->uid_keyring) {
|
||||||
ret = install_user_keyrings(context);
|
ret = install_user_keyrings();
|
||||||
if (ret < 0)
|
if (ret < 0)
|
||||||
goto error;
|
goto error;
|
||||||
}
|
}
|
||||||
|
|
||||||
key = context->user->uid_keyring;
|
key = t->user->uid_keyring;
|
||||||
atomic_inc(&key->usage);
|
atomic_inc(&key->usage);
|
||||||
key_ref = make_key_ref(key, 1);
|
key_ref = make_key_ref(key, 1);
|
||||||
break;
|
break;
|
||||||
|
|
||||||
case KEY_SPEC_USER_SESSION_KEYRING:
|
case KEY_SPEC_USER_SESSION_KEYRING:
|
||||||
if (!context->user->session_keyring) {
|
if (!t->user->session_keyring) {
|
||||||
ret = install_user_keyrings(context);
|
ret = install_user_keyrings();
|
||||||
if (ret < 0)
|
if (ret < 0)
|
||||||
goto error;
|
goto error;
|
||||||
}
|
}
|
||||||
|
|
||||||
key = context->user->session_keyring;
|
key = t->user->session_keyring;
|
||||||
atomic_inc(&key->usage);
|
atomic_inc(&key->usage);
|
||||||
key_ref = make_key_ref(key, 1);
|
key_ref = make_key_ref(key, 1);
|
||||||
break;
|
break;
|
||||||
|
@ -669,7 +670,7 @@ key_ref_t lookup_user_key(struct task_struct *context, key_serial_t id,
|
||||||
goto error;
|
goto error;
|
||||||
|
|
||||||
case KEY_SPEC_REQKEY_AUTH_KEY:
|
case KEY_SPEC_REQKEY_AUTH_KEY:
|
||||||
key = context->request_key_auth;
|
key = t->request_key_auth;
|
||||||
if (!key)
|
if (!key)
|
||||||
goto error;
|
goto error;
|
||||||
|
|
||||||
|
@ -677,6 +678,25 @@ key_ref_t lookup_user_key(struct task_struct *context, key_serial_t id,
|
||||||
key_ref = make_key_ref(key, 1);
|
key_ref = make_key_ref(key, 1);
|
||||||
break;
|
break;
|
||||||
|
|
||||||
|
case KEY_SPEC_REQUESTOR_KEYRING:
|
||||||
|
if (!t->request_key_auth)
|
||||||
|
goto error;
|
||||||
|
|
||||||
|
down_read(&t->request_key_auth->sem);
|
||||||
|
if (t->request_key_auth->flags & KEY_FLAG_REVOKED) {
|
||||||
|
key_ref = ERR_PTR(-EKEYREVOKED);
|
||||||
|
key = NULL;
|
||||||
|
} else {
|
||||||
|
rka = t->request_key_auth->payload.data;
|
||||||
|
key = rka->dest_keyring;
|
||||||
|
atomic_inc(&key->usage);
|
||||||
|
}
|
||||||
|
up_read(&t->request_key_auth->sem);
|
||||||
|
if (!key)
|
||||||
|
goto error;
|
||||||
|
key_ref = make_key_ref(key, 1);
|
||||||
|
break;
|
||||||
|
|
||||||
default:
|
default:
|
||||||
key_ref = ERR_PTR(-EINVAL);
|
key_ref = ERR_PTR(-EINVAL);
|
||||||
if (id < 1)
|
if (id < 1)
|
||||||
|
@ -725,7 +745,7 @@ key_ref_t lookup_user_key(struct task_struct *context, key_serial_t id,
|
||||||
goto invalid_key;
|
goto invalid_key;
|
||||||
|
|
||||||
/* check the permissions */
|
/* check the permissions */
|
||||||
ret = key_task_permission(key_ref, context, perm);
|
ret = key_task_permission(key_ref, t, perm);
|
||||||
if (ret < 0)
|
if (ret < 0)
|
||||||
goto invalid_key;
|
goto invalid_key;
|
||||||
|
|
||||||
|
@ -754,7 +774,7 @@ long join_session_keyring(const char *name)
|
||||||
|
|
||||||
/* if no name is provided, install an anonymous keyring */
|
/* if no name is provided, install an anonymous keyring */
|
||||||
if (!name) {
|
if (!name) {
|
||||||
ret = install_session_keyring(tsk, NULL);
|
ret = install_session_keyring(NULL);
|
||||||
if (ret < 0)
|
if (ret < 0)
|
||||||
goto error;
|
goto error;
|
||||||
|
|
||||||
|
@ -784,7 +804,7 @@ long join_session_keyring(const char *name)
|
||||||
}
|
}
|
||||||
|
|
||||||
/* we've got a keyring - now to install it */
|
/* we've got a keyring - now to install it */
|
||||||
ret = install_session_keyring(tsk, keyring);
|
ret = install_session_keyring(keyring);
|
||||||
if (ret < 0)
|
if (ret < 0)
|
||||||
goto error2;
|
goto error2;
|
||||||
|
|
||||||
|
|
|
@ -76,6 +76,10 @@ static int call_sbin_request_key(struct key_construction *cons,
|
||||||
|
|
||||||
kenter("{%d},{%d},%s", key->serial, authkey->serial, op);
|
kenter("{%d},{%d},%s", key->serial, authkey->serial, op);
|
||||||
|
|
||||||
|
ret = install_user_keyrings();
|
||||||
|
if (ret < 0)
|
||||||
|
goto error_alloc;
|
||||||
|
|
||||||
/* allocate a new session keyring */
|
/* allocate a new session keyring */
|
||||||
sprintf(desc, "_req.%u", key->serial);
|
sprintf(desc, "_req.%u", key->serial);
|
||||||
|
|
||||||
|
@ -165,7 +169,8 @@ error_alloc:
|
||||||
* - we ignore program failure and go on key status instead
|
* - we ignore program failure and go on key status instead
|
||||||
*/
|
*/
|
||||||
static int construct_key(struct key *key, const void *callout_info,
|
static int construct_key(struct key *key, const void *callout_info,
|
||||||
size_t callout_len, void *aux)
|
size_t callout_len, void *aux,
|
||||||
|
struct key *dest_keyring)
|
||||||
{
|
{
|
||||||
struct key_construction *cons;
|
struct key_construction *cons;
|
||||||
request_key_actor_t actor;
|
request_key_actor_t actor;
|
||||||
|
@ -179,7 +184,8 @@ static int construct_key(struct key *key, const void *callout_info,
|
||||||
return -ENOMEM;
|
return -ENOMEM;
|
||||||
|
|
||||||
/* allocate an authorisation key */
|
/* allocate an authorisation key */
|
||||||
authkey = request_key_auth_new(key, callout_info, callout_len);
|
authkey = request_key_auth_new(key, callout_info, callout_len,
|
||||||
|
dest_keyring);
|
||||||
if (IS_ERR(authkey)) {
|
if (IS_ERR(authkey)) {
|
||||||
kfree(cons);
|
kfree(cons);
|
||||||
ret = PTR_ERR(authkey);
|
ret = PTR_ERR(authkey);
|
||||||
|
@ -207,27 +213,48 @@ static int construct_key(struct key *key, const void *callout_info,
|
||||||
}
|
}
|
||||||
|
|
||||||
/*
|
/*
|
||||||
* link a key to the appropriate destination keyring
|
* get the appropriate destination keyring for the request
|
||||||
* - the caller must hold a write lock on the destination keyring
|
* - we return whatever keyring we select with an extra reference upon it which
|
||||||
|
* the caller must release
|
||||||
*/
|
*/
|
||||||
static void construct_key_make_link(struct key *key, struct key *dest_keyring)
|
static void construct_get_dest_keyring(struct key **_dest_keyring)
|
||||||
{
|
{
|
||||||
|
struct request_key_auth *rka;
|
||||||
struct task_struct *tsk = current;
|
struct task_struct *tsk = current;
|
||||||
struct key *drop = NULL;
|
struct key *dest_keyring = *_dest_keyring, *authkey;
|
||||||
|
|
||||||
kenter("{%d},%p", key->serial, dest_keyring);
|
kenter("%p", dest_keyring);
|
||||||
|
|
||||||
/* find the appropriate keyring */
|
/* find the appropriate keyring */
|
||||||
if (!dest_keyring) {
|
if (dest_keyring) {
|
||||||
|
/* the caller supplied one */
|
||||||
|
key_get(dest_keyring);
|
||||||
|
} else {
|
||||||
|
/* use a default keyring; falling through the cases until we
|
||||||
|
* find one that we actually have */
|
||||||
switch (tsk->jit_keyring) {
|
switch (tsk->jit_keyring) {
|
||||||
case KEY_REQKEY_DEFL_DEFAULT:
|
case KEY_REQKEY_DEFL_DEFAULT:
|
||||||
|
case KEY_REQKEY_DEFL_REQUESTOR_KEYRING:
|
||||||
|
if (tsk->request_key_auth) {
|
||||||
|
authkey = tsk->request_key_auth;
|
||||||
|
down_read(&authkey->sem);
|
||||||
|
rka = authkey->payload.data;
|
||||||
|
if (!test_bit(KEY_FLAG_REVOKED,
|
||||||
|
&authkey->flags))
|
||||||
|
dest_keyring =
|
||||||
|
key_get(rka->dest_keyring);
|
||||||
|
up_read(&authkey->sem);
|
||||||
|
if (dest_keyring)
|
||||||
|
break;
|
||||||
|
}
|
||||||
|
|
||||||
case KEY_REQKEY_DEFL_THREAD_KEYRING:
|
case KEY_REQKEY_DEFL_THREAD_KEYRING:
|
||||||
dest_keyring = tsk->thread_keyring;
|
dest_keyring = key_get(tsk->thread_keyring);
|
||||||
if (dest_keyring)
|
if (dest_keyring)
|
||||||
break;
|
break;
|
||||||
|
|
||||||
case KEY_REQKEY_DEFL_PROCESS_KEYRING:
|
case KEY_REQKEY_DEFL_PROCESS_KEYRING:
|
||||||
dest_keyring = tsk->signal->process_keyring;
|
dest_keyring = key_get(tsk->signal->process_keyring);
|
||||||
if (dest_keyring)
|
if (dest_keyring)
|
||||||
break;
|
break;
|
||||||
|
|
||||||
|
@ -236,17 +263,16 @@ static void construct_key_make_link(struct key *key, struct key *dest_keyring)
|
||||||
dest_keyring = key_get(
|
dest_keyring = key_get(
|
||||||
rcu_dereference(tsk->signal->session_keyring));
|
rcu_dereference(tsk->signal->session_keyring));
|
||||||
rcu_read_unlock();
|
rcu_read_unlock();
|
||||||
drop = dest_keyring;
|
|
||||||
|
|
||||||
if (dest_keyring)
|
if (dest_keyring)
|
||||||
break;
|
break;
|
||||||
|
|
||||||
case KEY_REQKEY_DEFL_USER_SESSION_KEYRING:
|
case KEY_REQKEY_DEFL_USER_SESSION_KEYRING:
|
||||||
dest_keyring = tsk->user->session_keyring;
|
dest_keyring = key_get(tsk->user->session_keyring);
|
||||||
break;
|
break;
|
||||||
|
|
||||||
case KEY_REQKEY_DEFL_USER_KEYRING:
|
case KEY_REQKEY_DEFL_USER_KEYRING:
|
||||||
dest_keyring = tsk->user->uid_keyring;
|
dest_keyring = key_get(tsk->user->uid_keyring);
|
||||||
break;
|
break;
|
||||||
|
|
||||||
case KEY_REQKEY_DEFL_GROUP_KEYRING:
|
case KEY_REQKEY_DEFL_GROUP_KEYRING:
|
||||||
|
@ -255,10 +281,9 @@ static void construct_key_make_link(struct key *key, struct key *dest_keyring)
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
|
||||||
/* and attach the key to it */
|
*_dest_keyring = dest_keyring;
|
||||||
__key_link(dest_keyring, key);
|
kleave(" [dk %d]", key_serial(dest_keyring));
|
||||||
key_put(drop);
|
return;
|
||||||
kleave("");
|
|
||||||
}
|
}
|
||||||
|
|
||||||
/*
|
/*
|
||||||
|
@ -288,8 +313,7 @@ static int construct_alloc_key(struct key_type *type,
|
||||||
|
|
||||||
set_bit(KEY_FLAG_USER_CONSTRUCT, &key->flags);
|
set_bit(KEY_FLAG_USER_CONSTRUCT, &key->flags);
|
||||||
|
|
||||||
if (dest_keyring)
|
down_write(&dest_keyring->sem);
|
||||||
down_write(&dest_keyring->sem);
|
|
||||||
|
|
||||||
/* attach the key to the destination keyring under lock, but we do need
|
/* attach the key to the destination keyring under lock, but we do need
|
||||||
* to do another check just in case someone beat us to it whilst we
|
* to do another check just in case someone beat us to it whilst we
|
||||||
|
@ -301,12 +325,10 @@ static int construct_alloc_key(struct key_type *type,
|
||||||
if (!IS_ERR(key_ref))
|
if (!IS_ERR(key_ref))
|
||||||
goto key_already_present;
|
goto key_already_present;
|
||||||
|
|
||||||
if (dest_keyring)
|
__key_link(dest_keyring, key);
|
||||||
construct_key_make_link(key, dest_keyring);
|
|
||||||
|
|
||||||
mutex_unlock(&key_construction_mutex);
|
mutex_unlock(&key_construction_mutex);
|
||||||
if (dest_keyring)
|
up_write(&dest_keyring->sem);
|
||||||
up_write(&dest_keyring->sem);
|
|
||||||
mutex_unlock(&user->cons_lock);
|
mutex_unlock(&user->cons_lock);
|
||||||
*_key = key;
|
*_key = key;
|
||||||
kleave(" = 0 [%d]", key_serial(key));
|
kleave(" = 0 [%d]", key_serial(key));
|
||||||
|
@ -348,21 +370,26 @@ static struct key *construct_key_and_link(struct key_type *type,
|
||||||
if (!user)
|
if (!user)
|
||||||
return ERR_PTR(-ENOMEM);
|
return ERR_PTR(-ENOMEM);
|
||||||
|
|
||||||
|
construct_get_dest_keyring(&dest_keyring);
|
||||||
|
|
||||||
ret = construct_alloc_key(type, description, dest_keyring, flags, user,
|
ret = construct_alloc_key(type, description, dest_keyring, flags, user,
|
||||||
&key);
|
&key);
|
||||||
key_user_put(user);
|
key_user_put(user);
|
||||||
|
|
||||||
if (ret == 0) {
|
if (ret == 0) {
|
||||||
ret = construct_key(key, callout_info, callout_len, aux);
|
ret = construct_key(key, callout_info, callout_len, aux,
|
||||||
|
dest_keyring);
|
||||||
if (ret < 0)
|
if (ret < 0)
|
||||||
goto construction_failed;
|
goto construction_failed;
|
||||||
}
|
}
|
||||||
|
|
||||||
|
key_put(dest_keyring);
|
||||||
return key;
|
return key;
|
||||||
|
|
||||||
construction_failed:
|
construction_failed:
|
||||||
key_negate_and_link(key, key_negative_timeout, NULL, NULL);
|
key_negate_and_link(key, key_negative_timeout, NULL, NULL);
|
||||||
key_put(key);
|
key_put(key);
|
||||||
|
key_put(dest_keyring);
|
||||||
return ERR_PTR(ret);
|
return ERR_PTR(ret);
|
||||||
}
|
}
|
||||||
|
|
||||||
|
|
|
@ -128,6 +128,7 @@ static void request_key_auth_destroy(struct key *key)
|
||||||
}
|
}
|
||||||
|
|
||||||
key_put(rka->target_key);
|
key_put(rka->target_key);
|
||||||
|
key_put(rka->dest_keyring);
|
||||||
kfree(rka->callout_info);
|
kfree(rka->callout_info);
|
||||||
kfree(rka);
|
kfree(rka);
|
||||||
|
|
||||||
|
@ -139,7 +140,7 @@ static void request_key_auth_destroy(struct key *key)
|
||||||
* access to the caller's security data
|
* access to the caller's security data
|
||||||
*/
|
*/
|
||||||
struct key *request_key_auth_new(struct key *target, const void *callout_info,
|
struct key *request_key_auth_new(struct key *target, const void *callout_info,
|
||||||
size_t callout_len)
|
size_t callout_len, struct key *dest_keyring)
|
||||||
{
|
{
|
||||||
struct request_key_auth *rka, *irka;
|
struct request_key_auth *rka, *irka;
|
||||||
struct key *authkey = NULL;
|
struct key *authkey = NULL;
|
||||||
|
@ -188,6 +189,7 @@ struct key *request_key_auth_new(struct key *target, const void *callout_info,
|
||||||
}
|
}
|
||||||
|
|
||||||
rka->target_key = key_get(target);
|
rka->target_key = key_get(target);
|
||||||
|
rka->dest_keyring = key_get(dest_keyring);
|
||||||
memcpy(rka->callout_info, callout_info, callout_len);
|
memcpy(rka->callout_info, callout_info, callout_len);
|
||||||
rka->callout_len = callout_len;
|
rka->callout_len = callout_len;
|
||||||
|
|
||||||
|
@ -223,6 +225,7 @@ error_inst:
|
||||||
key_put(authkey);
|
key_put(authkey);
|
||||||
error_alloc:
|
error_alloc:
|
||||||
key_put(rka->target_key);
|
key_put(rka->target_key);
|
||||||
|
key_put(rka->dest_keyring);
|
||||||
kfree(rka->callout_info);
|
kfree(rka->callout_info);
|
||||||
kfree(rka);
|
kfree(rka);
|
||||||
kleave("= %d", ret);
|
kleave("= %d", ret);
|
||||||
|
|
Loading…
Reference in New Issue