Christian Göttsche 654e3d2779 security: keys: perform capable check only on privileged operations ... [ Upstream commit 2d7f105edbb3b2be5ffa4d833abbf9b6965e9ce7 ] If the current task fails the check for the queried capability via `capable(CAP_SYS_ADMIN)` LSMs like SELinux generate a denial message. Issuing such denial messages unnecessarily can lead to a policy author granting more privileges to a subject than needed to silence them. Reorder CAP_SYS_ADMIN checks after the check whether the operation is actually privileged. Signed-off-by: Christian Göttsche <cgzones@googlemail.com> Reviewed-by: Jarkko Sakkinen <jarkko@kernel.org> Signed-off-by: Jarkko Sakkinen <jarkko@kernel.org> Signed-off-by: Sasha Levin <sashal@kernel.org>		2023-09-19 12:20:05 +02:00
..
encrypted-keys	Minor fixes for v5.9.	2020-08-11 14:30:36 -07:00
trusted-keys	security: keys: Modify mismatched function name	2023-07-27 08:44:39 +02:00
big_key.c	mm, treewide: rename kzfree() to kfree_sensitive()	2020-08-07 11:33:22 -07:00
compat_dh.c	treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 152	2019-05-30 11:26:32 -07:00
compat.c	security/keys: remove compat_keyctl_instantiate_key_iov	2020-10-03 00:02:16 -04:00
dh.c	mm, treewide: rename kzfree() to kfree_sensitive()	2020-08-07 11:33:22 -07:00
gc.c	watch_queue: Add a key/keyring notification facility	2020-05-19 15:19:06 +01:00
internal.h	security/keys: remove compat_keyctl_instantiate_key_iov	2020-10-03 00:02:16 -04:00
Kconfig	watch_queue: Drop references to /dev/watch_queue	2021-03-04 11:37:59 +01:00
key.c	certs: Fix blacklist flag type confusion	2021-03-04 11:37:59 +01:00
keyctl_pkey.c	KEYS: fix length validation in keyctl_pkey_params_get_2()	2022-04-08 14:39:50 +02:00
keyctl.c	security: keys: perform capable check only on privileged operations	2023-09-19 12:20:05 +02:00
keyring.c	watch_queue: Add a key/keyring notification facility	2020-05-19 15:19:06 +01:00
Makefile	KEYS: remove CONFIG_KEYS_COMPAT	2019-12-12 23:41:17 +02:00
permission.c	keys: Make the KEY_NEED_* perms an enum rather than a mask	2020-05-19 15:42:22 +01:00
persistent.c	Revert "Merge tag 'keys-acl-20190703' of git://git.kernel.org/pub/scm/linux/kernel/git/dhowells/linux-fs"	2019-07-10 18:43:43 -07:00
proc.c	keys: Fix proc_keys_next to increase position index	2020-04-16 10:10:50 -07:00
process_keys.c	treewide: Use fallthrough pseudo-keyword	2020-08-23 17:36:59 -05:00
request_key_auth.c	KEYS: Don't write out to userspace while holding key semaphore	2020-03-29 12:40:41 +01:00
request_key.c	keys: Fix linking a duplicate key to a keyring's assoc_array	2023-07-27 08:44:34 +02:00
sysctl.c	proc/sysctl: add shared variables for range check	2019-07-18 17:08:07 -07:00
user_defined.c	mm, treewide: rename kzfree() to kfree_sensitive()	2020-08-07 11:33:22 -07:00