Mimi Zohar
d3600bcf9d
KEYS: prevent keys from being removed from specified keyrings
...
Userspace should not be allowed to remove keys from certain keyrings
(eg. blacklist), though the keys themselves can expire.
This patch defines a new key flag named KEY_FLAG_KEEP to prevent
userspace from being able to unlink, revoke, invalidate or timed
out a key on a keyring. When this flag is set on the keyring, all
keys subsequently added are flagged.
In addition, when this flag is set, the keyring itself can not be
cleared.
Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>
Cc: David Howells <dhowells@redhat.com>
2015-12-15 10:01:43 -05:00
..
acpi
Merge branch 'acpi-pci'
2015-11-07 01:30:10 +01:00
asm-generic
h8300 update for v4.4
2015-11-12 15:26:39 -08:00
clocksource
crypto
Merge branch 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security
2015-11-05 15:32:38 -08:00
drm
drm/atomic: add a drm_atomic_clean_old_fb helper.
2015-11-17 13:02:14 +02:00
dt-bindings
ARM: DT updates for v4.4
2015-11-10 15:06:26 -08:00
keys
IMA: create machine owner and blacklist keyrings
2015-12-15 10:01:43 -05:00
kvm
s390: A bunch of fixes and optimizations for interrupt and time
2015-11-05 16:26:26 -08:00
linux
KEYS: prevent keys from being removed from specified keyrings
2015-12-15 10:01:43 -05:00
math-emu
media
[media] v4l2: add support for SDR transmitter
2015-10-20 15:40:50 -02:00
memory
misc
net
net: switchdev: fix return code of fdb_dump stub
2015-11-16 15:24:37 -05:00
pcmcia
ras
rdma
IB/core, cma: Make __attribute_const__ declarations sparse-friendly
2015-10-30 17:57:49 -04:00
rxrpc
scsi
scsi: use host wide tags by default
2015-11-09 17:11:57 -08:00
soc
ARM: SoC driver updates for v4.4
2015-11-10 15:00:03 -08:00
sound
ALSA: Constify ratden/ratnum constraints
2015-10-28 11:42:22 +01:00
target
Merge branch 'for-next' of git://git.kernel.org/pub/scm/linux/kernel/git/nab/target-pending
2015-11-13 20:04:17 -08:00
trace
Merge branch 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/rzhang/linux
2015-11-11 09:03:01 -08:00
uapi
VFIO updates for v4.4-rc1
2015-11-13 17:05:32 -08:00
video
drm/exynos/decon5433: add support for DECON-TV
2015-11-03 11:46:37 +09:00
xen
xen/grant-table: Add an helper to iterate over a specific number of grants
2015-10-23 14:20:46 +01:00
Kbuild