Introduce SELinux hooks to support the access key retention subsystem within the kernel. Incorporate new flask headers from a modified version of the SELinux reference policy, with support for the new security class representing retained keys. Extend the "key_alloc" security hook with a task parameter representing the intended ownership context for the key being allocated. Attach security information to root's default keyrings within the SELinux initialization routine. Has passed David's testsuite.
Showing the changes to security/keys/key.c (1 of 16 files). Show all
Unified · Split
| @@ -247,8 +247,8 @@ static inline void key_alloc_serial(struct key *key) · 246 unmodified lines | ||
| 247 | 247 | * instantiate the key or discard it before returning |
| 248 | 248 | */ |
| 249 | 249 | struct key *key_alloc(struct key_type *type, const char *desc, |
| 250 | − uid_t uid, gid_t gid, key_perm_t perm, | |
| 251 | − int not_in_quota) | |
| 250 | + uid_t uid, gid_t gid, struct task_struct *ctx, | |
| 251 | + key_perm_t perm, int not_in_quota) | |
| 252 | 252 | { |
| 253 | 253 | struct key_user *user = NULL; |
| 254 | 254 | struct key *key; |
| @@ -318,7 +318,7 @@ struct key *key_alloc(struct key_type *type, const char *desc, · 63 unmodified lines | ||
| 318 | 318 | #endif |
| 319 | 319 | |
| 320 | 320 | /* let the security module know about the key */ |
| 321 | − ret = security_key_alloc(key); | |
| 321 | + ret = security_key_alloc(key, ctx); | |
| 322 | 322 | if (ret < 0) |
| 323 | 323 | goto security_error; |
| 324 | 324 | |
| @@ -822,7 +822,7 @@ key_ref_t key_create_or_update(key_ref_t keyring_ref, · 497 unmodified lines | ||
| 822 | 822 | |
| 823 | 823 | /* allocate a new key */ |
| 824 | 824 | key = key_alloc(ktype, description, current->fsuid, current->fsgid, |
| 825 | − perm, not_in_quota); | |
| 825 | + current, perm, not_in_quota); | |
| 826 | 826 | if (IS_ERR(key)) { |
| 827 | 827 | key_ref = ERR_PTR(PTR_ERR(key)); |
| 828 | 828 | goto error_3; |