David Howells 008643b86c KEYS: Add a 'trusted' flag and a 'trusted only' flag ...

Add KEY_FLAG_TRUSTED to indicate that a key either comes from a trusted source
or had a cryptographic signature chain that led back to a trusted key the
kernel already possessed.

Add KEY_FLAGS_TRUSTED_ONLY to indicate that a keyring will only accept links to
keys marked with KEY_FLAGS_TRUSTED.

Signed-off-by: David Howells <dhowells@redhat.com>
Reviewed-by: Kees Cook <keescook@chromium.org>

2013-09-25 17:17:01 +01:00

..

encrypted-keys

KEYS: Add payload preparsing opportunity prior to key instantiate or update

2012-10-08 13:49:48 +10:30

big_key.c

KEYS: Implement a big key type that can save to tmpfs

2013-09-24 10:35:18 +01:00

compat.c

KEYS: Add per-user_namespace registers for persistent per-UID kerberos caches

2013-09-24 10:35:19 +01:00

gc.c

KEYS: Expand the capacity of a keyring

2013-09-24 10:35:18 +01:00

internal.h

KEYS: Add per-user_namespace registers for persistent per-UID kerberos caches

2013-09-24 10:35:19 +01:00

Kconfig

KEYS: Add per-user_namespace registers for persistent per-UID kerberos caches

2013-09-24 10:35:19 +01:00

key.c

KEYS: Add a 'trusted' flag and a 'trusted only' flag

2013-09-25 17:17:01 +01:00

keyctl.c

KEYS: Add per-user_namespace registers for persistent per-UID kerberos caches

2013-09-24 10:35:19 +01:00

keyring.c

KEYS: Add a 'trusted' flag and a 'trusted only' flag

2013-09-25 17:17:01 +01:00

Makefile

KEYS: Add per-user_namespace registers for persistent per-UID kerberos caches

2013-09-24 10:35:19 +01:00

permission.c

userns: Convert security/keys to the new userns infrastructure

2012-09-13 18:28:02 -07:00

persistent.c

KEYS: Add per-user_namespace registers for persistent per-UID kerberos caches

2013-09-24 10:35:19 +01:00

proc.c

KEYS: Introduce a search context structure

2013-09-24 10:35:15 +01:00

process_keys.c

KEYS: Define a __key_get() wrapper to use rather than atomic_inc()

2013-09-24 10:35:16 +01:00

request_key_auth.c

KEYS: Search for auth-key by name rather than target key ID

2013-09-24 10:35:16 +01:00

request_key.c

KEYS: Expand the capacity of a keyring

2013-09-24 10:35:18 +01:00

sysctl.c

KEYS: Add per-user_namespace registers for persistent per-UID kerberos caches

2013-09-24 10:35:19 +01:00

trusted.c

Merge branch 'modules-next' of git://git.kernel.org/pub/scm/linux/kernel/git/rusty/linux

2012-10-14 13:39:34 -07:00

trusted.h

trusted-keys: rename trusted_defined files to trusted

2011-01-24 10:14:22 +11:00

user_defined.c

KEYS: Introduce a search context structure

2013-09-24 10:35:15 +01:00