[lkml]   [2006]   [Mar]   [28]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
Messages in this thread
SubjectRe: [PATCH] split security_key_alloc into two functions
Serge E. Hallyn <> wrote:

> The security_key_alloc() function acted as both an authorizer and
> security structure allocation function. These roles should be
> separated. There are two reasons for this.

Your patch is part of what I had originally, but this was mildly objected to
because SE Linux didn't care, so I dropped the post function for later
resurrection. See the email thread rooted on:

| From: David Howells <>
| To:,
| Date: Wed, 05 Oct 2005 17:28:34 +0100
| Cc:,
| Subject: [Keyrings] [PATCH] Keys: Add LSM hooks for key management

in which I included key_post_alloc():

/* publish the key by giving it a serial number */

- error:
+ /* let the security module know the key has been published */
+ security_key_post_alloc(key);

I'm happy with this patch, though I'd like the comment you can see in the
above snippet to be added back into key.c too.

Note also that by the time the post function is called, it's a little late to
be authorising creation of the key since the key has been published by that

Acked-By: David Howells <>
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to
More majordomo info at
Please read the FAQ at

 \ /
  Last update: 2006-03-28 15:52    [W:0.047 / U:0.708 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site