]> git.karo-electronics.de Git - karo-tx-linux.git/commit
eCryptfs: Validate global auth tok keys
authorTyler Hicks <tyhicks@linux.vnet.ibm.com>
Wed, 26 Aug 2009 06:54:56 +0000 (01:54 -0500)
committerGreg Kroah-Hartman <gregkh@suse.de>
Mon, 5 Oct 2009 16:31:41 +0000 (09:31 -0700)
commitde4f86bf0cfecea80ed02aeb850f15838936c83b
tree2869e111754c8174af90be15e730a8fe1b77c62e
parentf7d98b8fd06509ab1fca22923b4bbf11e7567955
eCryptfs: Validate global auth tok keys

commit 3891959846709a19f76628e33478cd85edb0e79f upstream.

When searching through the global authentication tokens for a given key
signature, verify that a matching key has not been revoked and has not
expired.  This allows the `keyctl revoke` command to be properly used on
keys in use by eCryptfs.

Acked-by: Serge Hallyn <serue@us.ibm.com>
Cc: ecryptfs-devel@lists.launchpad.net
Signed-off-by: Tyler Hicks <tyhicks@linux.vnet.ibm.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>
fs/ecryptfs/keystore.c