Re: [PATCH] keys: Allow disabling read permissions for key possessor

2021-03-22 Thread Jarkko Sakkinen
On Mon, Mar 22, 2021 at 12:57:26PM +0300, Andrey Ryabinin wrote: > keyctl_read_key() has a strange code which allows possessor to read > key's payload regardless of READ permission status: > > $ keyctl add user test test @u > 196773443 > $ keyctl print 196773443 > test > $ keyctl describe

Re: [PATCH] keys: Allow disabling read permissions for key possessor

2021-03-22 Thread Eric Biggers
On Mon, Mar 22, 2021 at 12:57:26PM +0300, Andrey Ryabinin wrote: > keyctl_read_key() has a strange code which allows possessor to read > key's payload regardless of READ permission status: > > $ keyctl add user test test @u > 196773443 > $ keyctl print 196773443 > test > $ keyctl describe

[PATCH] keys: Allow disabling read permissions for key possessor

2021-03-22 Thread Andrey Ryabinin
keyctl_read_key() has a strange code which allows possessor to read key's payload regardless of READ permission status: $ keyctl add user test test @u 196773443 $ keyctl print 196773443 test $ keyctl describe 196773443 196773443: alswrv-v 1000 1000 user: test $ keyctl rdescribe