[LTP] [PATCH v2 2/2] syscalls/request_key04: new test for request_key() permission check bug
James Morris
james.l.morris@oracle.com
Wed Jan 10 01:56:36 CET 2018
On Tue, 9 Jan 2018, Eric Biggers wrote:
> From: Eric Biggers <ebiggers@google.com>
>
> Add a test for a bug that allowed the request_key() system call to be
> used to add a key to a keyring using only Search permission. This bug
> was assigned CVE-2017-17807.
>
> Signed-off-by: Eric Biggers <ebiggers@google.com>
Reviewed-by: James Morris <james.l.morris@oracle.com>
--
James Morris
<james.l.morris@oracle.com>
More information about the ltp
mailing list