[lkml]   [2006]   [Mar]   [28]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
Messages in this thread
    SubjectRe: [PATCH] split security_key_alloc into two functions
    Serge E. Hallyn <> wrote:

    > The security_key_alloc() function acted as both an authorizer and
    > security structure allocation function. These roles should be
    > separated. There are two reasons for this.

    Your patch is part of what I had originally, but this was mildly objected to
    because SE Linux didn't care, so I dropped the post function for later
    resurrection. See the email thread rooted on:

    | From: David Howells <>
    | To:,
    | Date: Wed, 05 Oct 2005 17:28:34 +0100
    | Cc:,
    | Subject: [Keyrings] [PATCH] Keys: Add LSM hooks for key management

    in which I included key_post_alloc():

    /* publish the key by giving it a serial number */

    - error:
    + /* let the security module know the key has been published */
    + security_key_post_alloc(key);

    I'm happy with this patch, though I'd like the comment you can see in the
    above snippet to be added back into key.c too.

    Note also that by the time the post function is called, it's a little late to
    be authorising creation of the key since the key has been published by that

    Acked-By: David Howells <>
    To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
    the body of a message to
    More majordomo info at
    Please read the FAQ at

     \ /
      Last update: 2006-03-28 15:52    [W:0.022 / U:5.880 seconds]
    ©2003-2017 Jasper Spaans. hosted at Digital OceanAdvertise on this site