• Eric W. Biederman's avatar
    userns: Convert security/keys to the new userns infrastructure · 9a56c2db
    Eric W. Biederman authored
    - Replace key_user ->user_ns equality checks with kuid_has_mapping checks.
    - Use from_kuid to generate key descriptions
    - Use kuid_t and kgid_t and the associated helpers instead of uid_t and gid_t
    - Avoid potential problems with file descriptor passing by displaying
      keys in the user namespace of the opener of key status proc files.
    
    Cc: linux-security-module@vger.kernel.org
    Cc: keyrings@linux-nfs.org
    Cc: David Howells <dhowells@redhat.com>
    Signed-off-by: default avatarEric W. Biederman <ebiederm@xmission.com>
    9a56c2db
Kconfig 50.7 KB