tree 2c53ccb405bd4afb03ff9f7acab892fafc7e9b0f
parent 9156235b3427d6f01c5c95022f72f381f07583f5
author David Howells <dhowells@redhat.com> 1276273870 +0100
committer James Morris <jmorris@namei.org> 1280727267 +1000

KEYS: Make /proc/keys check to see if a key is possessed before security check

Make /proc/keys check to see if the calling process possesses each key before
performing the security check.  The possession check can be skipped if the key
doesn't have the possessor-view permission bit set.

This causes the keys a process possesses to show up in /proc/keys, even if they
don't have matching user/group/other view permissions.

Signed-off-by: David Howells <dhowells@redhat.com>
Signed-off-by: James Morris <jmorris@namei.org>