[LTP] [PATCH v2 2/2] syscalls/request_key04: new test for request_key() permission check bug

James Morris james.l.morris@oracle.com
Wed Jan 10 01:56:36 CET 2018


On Tue, 9 Jan 2018, Eric Biggers wrote:

> From: Eric Biggers <ebiggers@google.com>
> 
> Add a test for a bug that allowed the request_key() system call to be
> used to add a key to a keyring using only Search permission.  This bug
> was assigned CVE-2017-17807.
> 
> Signed-off-by: Eric Biggers <ebiggers@google.com>


Reviewed-by: James Morris <james.l.morris@oracle.com>

-- 
James Morris
<james.l.morris@oracle.com>



More information about the ltp mailing list