| lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
|
Open Source and information security mailing list archives
| ||
|
Message-ID: <alpine.LRH.1.10.0808261846400.6116@tundra.namei.org> Date: Tue, 26 Aug 2008 18:46:58 +1000 (EST) From: James Morris <jmorris@...ei.org> To: David Howells <dhowells@...hat.com> cc: akpm@...ux-foundation.org, harvey.harrison@...il.com, linux-kernel@...r.kernel.org Subject: Re: [PATCH] CRED: Document the credential API's (ab)use of const pointers On Thu, 21 Aug 2008, David Howells wrote: > Document the credential API's (ab)use of const pointers. Various pointers to > credentials, such as those in the task_struct, are declared const. The purpose > of this is to compile-time discouragement of altering credentials through those > pointers. Once a set of credentials has been made public through one of these > pointers, it may not be modified, except under special circumstances: > > (1) Its reference count may incremented and decremented. > > (2) The keyrings to which it points may be modified, but not replaced. > > The only safe way to modify anything else is to create a replacement and commit > using the functions described in Documentation/credentials.txt. > > Signed-off-by: David Howells <dhowells@...hat.com> Applied to git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/security-testing-2.6#next-creds -- James Morris <jmorris@...ei.org> -- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@...r.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
Powered by blists - more mailing lists