• Jeff Layton's avatar
    cifs: explicitly revoke SPNEGO key after session setup · dfd15c46
    Jeff Layton authored
    cifs: explicitly revoke SPNEGO key after session setup
    
    The SPNEGO blob returned by an upcall can only be used once. Explicitly
    revoke it to make sure that we never pick it up again after session
    setup exits.
    
    This doesn't seem to be that big an issue on more recent kernels, but
    older kernels seem to link keys into the session keyring by default.
    That said, explicitly revoking the key seems like a reasonable thing
    to do here.
    Signed-off-by: default avatarJeff Layton <jlayton@redhat.com>
    Signed-off-by: default avatarSteve French <sfrench@us.ibm.com>
    dfd15c46
sess.c 18.1 KB