lkml.org 
[lkml]   [2012]   [Aug]   [15]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
    Patch in this message
    /
    From
    Subject[RFC v2 2/7] keys: initialize root uid and session keyrings early
    Date
    From: Mimi Zohar <zohar@linux.vnet.ibm.com>

    In order to create the integrity keyrings (eg. _evm, _ima, _modules),
    root's uid and session keyrings need to be initialized early.

    Signed-off-by: Mimi Zohar <zohar@us.ibm.com>
    ---
    security/keys/Makefile | 1 +
    security/keys/root_keyring.c | 18 ++++++++++++++++++
    2 files changed, 19 insertions(+)
    create mode 100644 security/keys/root_keyring.c

    diff --git a/security/keys/Makefile b/security/keys/Makefile
    index 504aaa0..c93ce8d 100644
    --- a/security/keys/Makefile
    +++ b/security/keys/Makefile
    @@ -18,6 +18,7 @@ obj-y := \
    obj-$(CONFIG_KEYS_COMPAT) += compat.o
    obj-$(CONFIG_PROC_FS) += proc.o
    obj-$(CONFIG_SYSCTL) += sysctl.o
    +obj-$(CONFIG_INTEGRITY_SIGNATURE) += root_keyring.o

    #
    # Key types
    diff --git a/security/keys/root_keyring.c b/security/keys/root_keyring.c
    new file mode 100644
    index 0000000..f6662eb
    --- /dev/null
    +++ b/security/keys/root_keyring.c
    @@ -0,0 +1,18 @@
    +/*
    + * Copyright (C) 2012 IBM Corporation
    + *
    + * Author:
    + * Mimi Zohar <zohar@us.ibm.com>
    + *
    + * This program is free software; you can redistribute it and/or modify
    + * it under the terms of the GNU General Public License as published by
    + * the Free Software Foundation, version 2 of the License.
    + */
    +
    +#include "internal.h"
    +static int __init init_root_keyring(void)
    +{
    + return install_user_keyrings();
    +}
    +
    +late_initcall(init_root_keyring);
    --
    1.7.9.5


    \
     
     \ /
      Last update: 2012-08-15 21:23    [W:0.028 / U:30.424 seconds]
    ©2003-2016 Jasper Spaans. hosted at Digital OceanAdvertise on this site