Michael LeMay e51f6d3437 [PATCH] keys: allocate key serial numbers randomly ... Cause key_alloc_serial() to generate key serial numbers randomly rather than in linear sequence. Using an linear sequence permits a covert communication channel to be established, in which one process can communicate with another by creating or not creating new keys within a certain timeframe. The second process can probe for the expected next key serial number and judge its existence by the error returned. This is a problem as the serial number namespace is globally shared between all tasks, regardless of their context. For more information on this topic, this old TCSEC guide is recommended: http://www.radium.ncsc.mil/tpep/library/rainbow/NCSC-TG-030.html Signed-off-by: Michael LeMay <mdlemay@epoch.ncsc.mil> Signed-off-by: James Morris <jmorris@namei.org> Signed-off-by: David Howells <dhowells@redhat.com> Signed-off-by: Andrew Morton <akpm@osdl.org> Signed-off-by: Linus Torvalds <torvalds@osdl.org>		2006-06-26 09:58:18 -07:00
..
compat.c	[PATCH] keys: Permit running process to instantiate keys	2006-01-08 20:13:53 -08:00
internal.h	[PATCH] keys: sort out key quota system	2006-06-26 09:58:18 -07:00
key.c	[PATCH] keys: allocate key serial numbers randomly	2006-06-26 09:58:18 -07:00
keyctl.c	[PATCH] keys: let keyctl_chown() change a key's owner	2006-06-26 09:58:18 -07:00
keyring.c	[PATCH] keys: discard the contents of a key on revocation	2006-06-26 09:58:18 -07:00
Makefile	[PATCH] Keys: Split key permissions checking into a .c file	2005-10-08 14:53:31 -07:00
permission.c	[PATCH] keys: Permit running process to instantiate keys	2006-01-08 20:13:53 -08:00
proc.c	[PATCH] Keys: Add possessor permissions to keys [try #3]	2005-09-28 09:10:47 -07:00
process_keys.c	[PATCH] keys: sort out key quota system	2006-06-26 09:58:18 -07:00
request_key_auth.c	[PATCH] keys: sort out key quota system	2006-06-26 09:58:18 -07:00
request_key.c	[PATCH] keys: sort out key quota system	2006-06-26 09:58:18 -07:00
user_defined.c	[PATCH] keys: discard the contents of a key on revocation	2006-06-26 09:58:18 -07:00