Re: [PATCH 1/2] KEYS: Replace uid/gid/perm permissions checking with an ACL

2019-08-14 Thread Eric Biggers
On Tue, Aug 06, 2019 at 07:58:14PM -0700, Eric Biggers wrote: > On Tue, Jul 30, 2019 at 06:16:14PM -0700, Eric Biggers wrote: > > On Mon, Jul 29, 2019 at 08:49:56PM -0700, Eric Biggers wrote: > > > Hi David, > > > > > > On Tue, Jul 09, 2019 at 06:16:01PM -0700, Eric Biggers wrote: > > > > On Thu,

Re: [PATCH 1/2] KEYS: Replace uid/gid/perm permissions checking with an ACL

2019-08-06 Thread Eric Biggers
On Tue, Jul 30, 2019 at 06:16:14PM -0700, Eric Biggers wrote: > On Mon, Jul 29, 2019 at 08:49:56PM -0700, Eric Biggers wrote: > > Hi David, > > > > On Tue, Jul 09, 2019 at 06:16:01PM -0700, Eric Biggers wrote: > > > On Thu, May 23, 2019 at 04:58:27PM +0100, David Howells wrote: > > > > Replace

Re: [PATCH 1/2] KEYS: Replace uid/gid/perm permissions checking with an ACL

2019-07-30 Thread Eric Biggers
On Mon, Jul 29, 2019 at 08:49:56PM -0700, Eric Biggers wrote: > Hi David, > > On Tue, Jul 09, 2019 at 06:16:01PM -0700, Eric Biggers wrote: > > On Thu, May 23, 2019 at 04:58:27PM +0100, David Howells wrote: > > > Replace the uid/gid/perm permissions checking on a key with an ACL to > > > allow >

Re: [PATCH 1/2] KEYS: Replace uid/gid/perm permissions checking with an ACL

2019-07-29 Thread Eric Biggers
Hi David, On Tue, Jul 09, 2019 at 06:16:01PM -0700, Eric Biggers wrote: > On Thu, May 23, 2019 at 04:58:27PM +0100, David Howells wrote: > > Replace the uid/gid/perm permissions checking on a key with an ACL to allow > > the SETATTR and SEARCH permissions to be split. This will also allow a > >

Re: [PATCH 1/2] KEYS: Replace uid/gid/perm permissions checking with an ACL

2019-07-09 Thread Eric Biggers
On Tue, Jul 09, 2019 at 06:16:01PM -0700, Eric Biggers wrote: > On Thu, May 23, 2019 at 04:58:27PM +0100, David Howells wrote: > > Replace the uid/gid/perm permissions checking on a key with an ACL to allow > > the SETATTR and SEARCH permissions to be split. This will also allow a > > greater

Re: [PATCH 1/2] KEYS: Replace uid/gid/perm permissions checking with an ACL

2019-07-09 Thread Eric Biggers
On Thu, May 23, 2019 at 04:58:27PM +0100, David Howells wrote: > Replace the uid/gid/perm permissions checking on a key with an ACL to allow > the SETATTR and SEARCH permissions to be split. This will also allow a > greater range of subjects to represented. > This patch broke 'keyctl

[PATCH 1/2] KEYS: Replace uid/gid/perm permissions checking with an ACL

2019-05-23 Thread David Howells
Replace the uid/gid/perm permissions checking on a key with an ACL to allow the SETATTR and SEARCH permissions to be split. This will also allow a greater range of subjects to represented. WHY DO THIS? The problem is that SETATTR and SEARCH cover a slew of actions, not