Messages in this thread | | | From | David Howells <> | Subject | Re: [PATCH 2/6] KEYS: Reinstate EPERM for a key type name beginning with a '.' | Date | Thu, 11 Sep 2014 22:26:52 +0100 |
| |
Mimi Zohar <zohar@linux.vnet.ibm.com> wrote:
> The concept of dot prefixing should probably be documented either in the > code and/or documentation. At this point, both types and keyring names > are reserved.
Indeed. There is one type whose name begins with a '.' that's sort of internal to the kernel (".request_key_auth") that I definitely don't want userspace to try creating.
The question of whether the description of a non-keyring key is permitted to begin with a '.' is a separate issue to this patch. We'd have to be sure that no one is using keys of such a form.
David
| |